Evil-DB LogoEvil-DB
← All CVEs

CVE-2021-45511

medium · 6.8

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

6.8
CVSS
17.6%
EPSS (exploit prob.)
97th
EPSS percentile
2021-12-26
Published

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductAffected versions
netgearac2100_firmware< 1.2.0.88
netgearac2100all versions
netgearac2400_firmware< 1.2.0.88
netgearac2400all versions
netgearac2600_firmware< 1.2.0.88
netgearac2600all versions
netgeard7000_firmware< 1.0.1.80
netgeard7000all versions
netgearr6220_firmware< 1.1.0.110
netgearr6220all versions
netgearr6230_firmware< 1.1.0.110
netgearr6230all versions
netgearr6260_firmware< 1.1.0.84
netgearr6260all versions
netgearr6330_firmware< 1.1.0.84
netgearr6330all versions
netgearr6350_firmware< 1.1.0.84
netgearr6350all versions
netgearr6700v2_firmware< 1.2.0.88
netgearr6700v2all versions
netgearr6800_firmware< 1.2.0.88
netgearr6800all versions
netgearr6850_firmware< 1.1.0.84
netgearr6850all versions
netgearr6900v2_firmware< 1.2.0.88
netgearr6900v2all versions
netgearr7200_firmware< 1.2.0.88
netgearr7200all versions
netgearr7350_firmware< 1.2.0.88
netgearr7350all versions
netgearr7400_firmware< 1.2.0.88
netgearr7400all versions
netgearr7450_firmware< 1.2.0.88
netgearr7450all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-45511