CVE-2021-45522

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Dec 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-455236.5NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.CVE-2021-455249.1NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user.CVE-2021-455258.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.CVE-2021-455268.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0CVE-2021-455279.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.1CVE-2021-455287.2Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6300v2 before 1.0.4.52, R6400 before 1.0.1CVE-2021-455297.2Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0CVE-2021-455308.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.CVE-2021-455318.8NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user.CVE-2021-455327.8NETGEAR R8000 devices before 1.0.4.76 are affected by command injection by an authenticated user.CVE-2021-455336.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects EX6120 before 1.0.0.66, EX6130 before 1.0.0CVE-2021-455347.8Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0