Threat Investigation
Request a demo

CVE-2021-45511

Medium

Description

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

SeverityMedium
CVSS6.8
Exploit probability—
ProductNetgear Ac2100 Firmware
PublishedDec 26, 2021
First seenDec 26, 2021

How to fix

Update
  • netgear ac2100_firmware1.2.0.88 or later
  • netgear ac2400_firmware1.2.0.88 or later
  • netgear ac2600_firmware1.2.0.88 or later
  • netgear d7000_firmware1.0.1.80 or later
  • netgear r6220_firmware1.1.0.110 or later
  • netgear r6230_firmware1.1.0.110 or later
  • netgear r6260_firmware1.1.0.84 or later
  • netgear r6330_firmware1.1.0.84 or later
  • netgear r6350_firmware1.1.0.84 or later
  • netgear r6700v2_firmware1.2.0.88 or later
  • netgear r6800_firmware1.2.0.88 or later
  • netgear r6850_firmware1.1.0.84 or later

Affected products

ProductAffected versionsFixed in
netgear ac2100_firmwarev < 1.2.0.881.2.0.88
netgear ac2400_firmwarev < 1.2.0.881.2.0.88
netgear ac2600_firmwarev < 1.2.0.881.2.0.88
netgear d7000_firmwarev < 1.0.1.801.0.1.80
netgear r6220_firmwarev < 1.1.0.1101.1.0.110
netgear r6230_firmwarev < 1.1.0.1101.1.0.110
netgear r6260_firmwarev < 1.1.0.841.1.0.84
netgear r6330_firmwarev < 1.1.0.841.1.0.84
netgear r6350_firmwarev < 1.1.0.841.1.0.84
netgear r6700v2_firmwarev < 1.2.0.881.2.0.88
netgear r6800_firmwarev < 1.2.0.881.2.0.88
netgear r6850_firmwarev < 1.1.0.841.1.0.84
netgear r6900v2_firmwarev < 1.2.0.881.2.0.88
netgear r7200_firmwarev < 1.2.0.881.2.0.88
netgear r7350_firmwarev < 1.2.0.881.2.0.88
netgear r7400_firmwarev < 1.2.0.881.2.0.88
netgear r7450_firmwarev < 1.2.0.881.2.0.88

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.