CVE-2021-45507

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBW30 before 2.6.2.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS40V before 2.6.2.8.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Dec 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-455089.8Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.CVE-2021-455099.8Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, RBK752 before 3.2.17.12, RBR750 before 3.CVE-2021-455108.8NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.CVE-2021-455119.8Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 befor CVE-2021-455129.8Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.CVE-2021-455139.6NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455148.8NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455156.5Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4,CVE-2021-455164.5Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.CVE-2021-455176.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455186.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455196.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.