CVE-2021-45511 : Certain NETGEAR devices are affected by authentication bypass. This affects AC21

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

Published 2021-12-26 01:15:13

Updated 2022-07-12 17:42:04

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2021-45511

Netgear » R6220 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6220 » Version: N/A
Netgear » D7000 Firmware
Versions before (<) 1.0.1.80
cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » D7000 » Version: N/A
Netgear » R6800 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6800 » Version: N/A
Netgear » R6230 Firmware
Versions before (<) 1.1.0.110
cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6230 » Version: N/A
Netgear » R6260 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6260 » Version: N/A
Netgear » R6850 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6850 » Version: N/A
Netgear » R6350 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6350 » Version: N/A
Netgear » R6330 Firmware
Versions before (<) 1.1.0.84
cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6330 » Version: N/A
Netgear » R7200 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7200 » Version: N/A
Netgear » R7350 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7350 » Version: N/A
Netgear » R7400 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7400 » Version: N/A
Netgear » R7450 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r7450_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R7450 » Version: N/A
Netgear » Ac2100 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2100_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2100 » Version: N/A
Netgear » Ac2400 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2400 » Version: N/A
Netgear » Ac2600 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:ac2600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Ac2600 » Version: N/A
Netgear » R6700v2 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6700v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6700v2 » Version: N/A
Netgear » R6900v2 Firmware
Versions before (<) 1.2.0.88
cpe:2.3:o:netgear:r6900v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » R6900v2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-45511

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-45511

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.8	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	MITRE
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2021-45511

https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133

Security Advisory for Authentication Bypass Vulnerability on the D7000 and Some Routers, PSV-2021-0133 | Answer | NETGEAR Support
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-45511

Products affected by CVE-2021-45511

Exploit prediction scoring system (EPSS) score for CVE-2021-45511

CVSS scores for CVE-2021-45511

References for CVE-2021-45511