CVE-2021-45511
Certain NETGEAR devices are affected by authentication bypass.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 17.6%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 17.64% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- netgear/ac2100 firmware · netgear/ac2400 firmware · netgear/ac2600 firmware · netgear/d7000 firmware · netgear/r6220 firmware · netgear/r6230 firmware · netgear/r6260 firmware · netgear/r6330 firmware · netgear/r6350 firmware · netgear/r6700v2 firmware · netgear/r6800 firmware · netgear/r6850 firmware · netgear/r6900v2 firmware · netgear/r7200 firmware · netgear/r7350 firmware · netgear/r7400 firmware · netgear/r7450 firmware
- Source
- cve@mitre.org
References
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133Patch, Vendor Advisory
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.