CVE-2021-34865

🗓️ 25 Jan 2022 15:30:34Reported by zdiType

CVE-2021-34865 vulnerability in NETGEAR routers allows bypassing authentication and executing arbitrary code

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-34865	25 Jan 202218:18	–	circl
CNNVD	NETGEAR 授权问题漏洞	30 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-34865	25 Jan 202215:30	–	cvelist
EUVD	EUVD-2021-21512	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34865	25 Jan 202216:15	–	nvd
Prion	Authentication flaw	25 Jan 202216:15	–	prion
Positive Technologies	PT-2021-20710 · NetGear · Netgear Routers	30 Aug 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-34865	22 May 202521:34	–	redhatcve
Zero Day Initiative	NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability	30 Aug 202100:00	–	zdi

NVD

Vulners

Node

netgear ac2100_firmwareRange<1.2.0.88

AND

netgear ac2100Match-

Node

netgear ac2400_firmwareRange<1.2.0.88

AND

netgear ac2400Match-

Node

netgear ac2600_firmwareRange<1.2.0.88

AND

netgear ac2600Match-

Node

netgear d7000v1_firmwareRange<1.0.1.80

AND

netgear d7000v1Match-

Node

netgear r6220_firmwareRange<1.1.0.110

AND

netgear r6220Match-

Node

netgear r6230_firmwareRange<1.1.0.110

AND

netgear r6230Match-

Node

netgear r6260_firmwareRange<1.1.0.84

AND

netgear r6260Match-

Node

netgear r6330_firmwareRange<1.1.0.84

AND

netgear r6330Match-

Node

netgear r6350_firmwareRange<1.1.0.84

AND

netgear r6350Match-

Node

netgear r6700v2_firmwareRange<1.2.0.88

AND

netgear r6700v2Match-

Node

netgear r6800_firmwareRange<1.2.0.88

AND

netgear r6800Match-

Node

netgear r6850_firmwareRange<1.1.0.84

AND

netgear r6850Match-

Node

netgear r6900v2_firmwareRange<1.2.0.88

AND

netgear r6900v2Match-

Node

netgear r7200_firmwareRange<1.2.0.88

AND

netgear r7200Match-

Node

netgear r7350_firmwareRange<1.2.0.88

AND

netgear r7350Match-

Node

netgear r7400_firmwareRange<1.2.0.88

AND

netgear r7400Match-

Node

netgear r7450_firmwareRange<1.2.0.88

AND

netgear r7450Match-

[
  {
    "product": "Multiple Routers",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0.76_1.0.1"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1051/
kb	www.kb.netgear.com/000063955/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-Some-Routers-PSV-2021-0083

21 Nov 2024 06:11Current

9.2High risk

Vulners AI Score9.2

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.01148