CVE-2021-45499

Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.2 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
mitreCNA
8.2 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
netgearr6900p_firmware
𝑥
< 1.3.3.140
netgearr7000p_firmware
𝑥
< 1.3.3.140
netgearr7900p_firmware
𝑥
< 1.4.2.84
netgearr7960p_firmware
𝑥
< 1.4.2.84
netgearr8000p_firmware
𝑥
< 1.4.2.84
netgearrax75_firmware
𝑥
< 1.0.3.106
netgearrax80_firmware
𝑥
< 1.0.3.106
𝑥
= Vulnerable software versions
References
https://kb.netgear.com/000064445/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0027
https://kb.netgear.com/000064445/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2019-0027