CVE-2021-45510

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-455119.8Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 beforCVE-2021-455129.8Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.CVE-2021-455139.6NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455148.8NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455156.5Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4,CVE-2021-455164.5Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.CVE-2021-455176.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455186.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455196.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455208.8Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 beforeCVE-2021-455216.5Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 beforeCVE-2021-455228.8NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.
CVE-2021-45510: High severity, CVSS 8.8 | Vulnix