10

CVE-2021-45511

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Ac2100 Firmware Version < 1.2.0.88
   Netgear ≫ Ac2100 Version -
Netgear ≫ Ac2400 Firmware Version < 1.2.0.88
   Netgear ≫ Ac2400 Version -
Netgear ≫ Ac2600 Firmware Version < 1.2.0.88
   Netgear ≫ Ac2600 Version -
Netgear ≫ D7000 Firmware Version < 1.0.1.80
   Netgear ≫ D7000 Version -
Netgear ≫ R6220 Firmware Version < 1.1.0.110
   Netgear ≫ R6220 Version -
Netgear ≫ R6230 Firmware Version < 1.1.0.110
   Netgear ≫ R6230 Version -
Netgear ≫ R6260 Firmware Version < 1.1.0.84
   Netgear ≫ R6260 Version -
Netgear ≫ R6330 Firmware Version < 1.1.0.84
   Netgear ≫ R6330 Version -
Netgear ≫ R6350 Firmware Version < 1.1.0.84
   Netgear ≫ R6350 Version -
Netgear ≫ R6700v2 Firmware Version < 1.2.0.88
   Netgear ≫ R6700v2 Version -
Netgear ≫ R6800 Firmware Version < 1.2.0.88
   Netgear ≫ R6800 Version -
Netgear ≫ R6850 Firmware Version < 1.1.0.84
   Netgear ≫ R6850 Version -
Netgear ≫ R6900v2 Firmware Version < 1.2.0.88
   Netgear ≫ R6900v2 Version -
Netgear ≫ R7200 Firmware Version < 1.2.0.88
   Netgear ≫ R7200 Version -
Netgear ≫ R7350 Firmware Version < 1.2.0.88
   Netgear ≫ R7350 Version -
Netgear ≫ R7400 Firmware Version < 1.2.0.88
   Netgear ≫ R7400 Version -
Netgear ≫ R7450 Firmware Version < 1.2.0.88
   Netgear ≫ R7450 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.64% 0.968
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
MITRE 6.8 0.9 5.9
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133
Patch
Vendor Advisory