CVE-2021-45501 : Certain NETGEAR devices are affected by authentication bypass. This affects AC24

Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before 1.0.0.52, R6080 before 1.0.0.52, R6120 before 1.0.0.80, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.1.0.84, R6800 before 1.1.0.84, R6850 before 1.1.0.84, R6900v2 before 1.1.0.84, R7200 before 1.1.0.84, R7350 before 1.1.0.84, R7400 before 1.1.0.84, and R7450 before 1.1.0.84.

Published 2021-12-26 01:15:13

Updated 2022-07-12 17:42:04

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-45501

Netgear » R6220 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6220 » Version: N/A
Netgear » D7000 Firmware
Versions before (<) 1.0.1.82
cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » D7000 » Version: N/A
Netgear » R6020 Firmware
Versions before (<) 1.0.0.52
cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6020 » Version: N/A
Netgear » R6080 Firmware
Versions before (<) 1.0.0.52
cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6080 » Version: N/A
Netgear » R6120 Firmware
Versions before (<) 1.0.0.80
cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6120 » Version: N/A
Netgear » R6800 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6800 » Version: N/A
Netgear » R6230 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6230 » Version: N/A
Netgear » R6260 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6260 » Version: N/A
Netgear » R6850 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6850 » Version: N/A
Netgear » R6350 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6350 » Version: N/A
Netgear » R6330 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6330 » Version: N/A
Netgear » R7200 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r7200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7200 » Version: N/A
Netgear » R7350 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r7350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7350 » Version: N/A
Netgear » R7400 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7400 » Version: N/A
Netgear » R7450 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r7450_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7450 » Version: N/A
Netgear » Ac2400 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:ac2400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2400 » Version: N/A
Netgear » Ac2600 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:ac2600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2600 » Version: N/A
Netgear » R6700v2 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6700v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6700v2 » Version: N/A
Netgear » R6900v2 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6900v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6900v2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-45501

EPSS FAQ

0.28%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-45501

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.4	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L	3.9	5.5	MITRE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: Low
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2021-45501

https://kb.netgear.com/000064532/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2021-0154

Security Advisory for Authentication Bypass on Some Routers, PSV-2021-0154 | Answer | NETGEAR Support
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-45501

Products affected by CVE-2021-45501

Exploit prediction scoring system (EPSS) score for CVE-2021-45501

CVSS scores for CVE-2021-45501

References for CVE-2021-45501