CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-45501

CVSS 9.4v3.1pub. 2021-12-26upd. 2024-11-21

Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6020 before 1.0.0.52, R6080 before 1.0.0.52, R6120 before 1.0.0.80, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.1.0.84, R6800 before 1.1.0.84, R6850 before 1.1.0.84, R6900v2 before 1.1.0.84, R7200 before 1.1.0.84, R7350 before 1.1.0.84, R7400 before 1.1.0.84, and R7450 before 1.1.0.84.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • Netgear Ac2400

    HW
    Netgear
    all versions

  • Netgear Ac2400 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear Ac2600

    HW
    Netgear
    all versions

  • Netgear Ac2600 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear D7000

    HW
    Netgear
    all versions

  • Netgear D7000 Firmware

    OS
    Netgear
    < 1.0.1.82

  • Netgear R6020

    HW
    Netgear
    all versions

  • Netgear R6020 Firmware

    OS
    Netgear
    < 1.0.0.52

  • Netgear R6080

    HW
    Netgear
    all versions

  • Netgear R6080 Firmware

    OS
    Netgear
    < 1.0.0.52

  • Netgear R6120

    HW
    Netgear
    all versions

  • Netgear R6120 Firmware

    OS
    Netgear
    < 1.0.0.80

  • Netgear R6220

    HW
    Netgear
    all versions

  • Netgear R6220 Firmware

    OS
    Netgear
    < 1.1.0.110

  • Netgear R6230

    HW
    Netgear
    all versions

  • Netgear R6230 Firmware

    OS
    Netgear
    < 1.1.0.110

  • Netgear R6260

    HW
    Netgear
    all versions

  • Netgear R6260 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6330

    HW
    Netgear
    all versions

  • Netgear R6330 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6350

    HW
    Netgear
    all versions

  • Netgear R6350 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6700v2

    HW
    Netgear
    all versions

  • Netgear R6700v2 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6800

    HW
    Netgear
    all versions

  • Netgear R6800 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6850

    HW
    Netgear
    all versions

  • Netgear R6850 Firmware

    OS
    Netgear
    < 1.1.0.84

  • Netgear R6900v2

    HW
    Netgear
    all versions

  • Netgear R6900v2 Firmware

    OS
    Netgear
    < 1.1.0.84
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia

CVE-2024-30568CRITICAL9.8PL ✓same product

Command injection w Netgear R6850 poprzez parametr c4-IPAddr

CVE-2021-45497CRITICAL9.4PL ✓same product

Authentication Bypass w urządzeniach NETGEAR D7000

CVE-2021-45496CRITICAL9.1PL ✓same product

Authentication Bypass w urządzeniach NETGEAR D7000

CVE-2021-38516CRITICAL10.0PL ✓same product

Brak kontroli dostępu na poziomie funkcji w urządzeniach NETGEAR