CVE-2021-45511

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Dec 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-455129.8Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.CVE-2021-455139.6NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455148.8NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455156.5Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4,CVE-2021-455164.5Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.CVE-2021-455176.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455186.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455196.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455208.8Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before CVE-2021-455216.5Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before CVE-2021-455228.8NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.CVE-2021-455236.5NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.