CVE-2021-45520

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Dec 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-455216.5Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 beforeCVE-2021-455228.8NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.CVE-2021-455236.5NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.CVE-2021-455249.1NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user.CVE-2021-455258.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.CVE-2021-455268.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0CVE-2021-455279.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.1CVE-2021-455287.2Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6300v2 before 1.0.4.52, R6400 before 1.0.1CVE-2021-455297.2Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0CVE-2021-455308.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.CVE-2021-455318.8NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user.CVE-2021-455327.8NETGEAR R8000 devices before 1.0.4.76 are affected by command injection by an authenticated user.
CVE-2021-45520: High severity, CVSS 8.8 | Vulnix