SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-45511

Certain NETGEAR devices are affected by authentication bypass.

CRITICAL 9.8EPSS 18.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 18.9%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
18.88% probability · 97th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Affected
netgear/ac2100 firmware · netgear/ac2400 firmware · netgear/ac2600 firmware · netgear/d7000 firmware · netgear/r6220 firmware · netgear/r6230 firmware · netgear/r6260 firmware · netgear/r6330 firmware · netgear/r6350 firmware · netgear/r6700v2 firmware · netgear/r6800 firmware · netgear/r6850 firmware · netgear/r6900v2 firmware · netgear/r7200 firmware · netgear/r7350 firmware · netgear/r7400 firmware · netgear/r7450 firmware
Source
cve@mitre.org
EPSS trend
0%10%20%19 October 2026: 18.88%3 November 2026: 18.88%19 October 20263 November 2026

EPSS moved from 18.9% on 19 October 2026 to 18.9% on 3 November 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.