CVE-2021-45511

🗓️ 26 Dec 2021 01:01:27Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 63 Views🌐 WEB

NETGEAR devices affected by authentication bypass CVE-2021-4551

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2021-45511	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication mechanism flaws. These flaws allow attackers to circumvent security restrictions.	25 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-45511	24 Sep 202120:20	–	circl
CNNVD	Netgear NETGEAR 授权问题漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45511	26 Dec 202101:01	–	cvelist
EUVD	EUVD-2021-32277	3 Oct 202520:07	–	euvd
Metasploit	Netgear PNPX_GetShareFolderList Authentication Bypass	25 Sep 202117:42	–	metasploit
NVD	CVE-2021-45511	26 Dec 202101:15	–	nvd
Prion	Authentication flaw	26 Dec 202101:15	–	prion
Positive Technologies	PT-2021-5887 · NetGear · Netgear R6260 +16	27 Aug 202100:00	–	ptsecurity

NVD

Node

netgear ac2100_firmwareRange<1.2.0.88

AND

netgear ac2100Match-

Node

netgear ac2400_firmwareRange<1.2.0.88

AND

netgear ac2400Match-

Node

netgear ac2600_firmwareRange<1.2.0.88

AND

netgear ac2600Match-

Node

netgear d7000_firmwareRange<1.0.1.80

AND

netgear d7000Match-

Node

netgear r6220_firmwareRange<1.1.0.110

AND

netgear r6220Match-

Node

netgear r6230_firmwareRange<1.1.0.110

AND

netgear r6230Match-

Node

netgear r6260_firmwareRange<1.1.0.84

AND

netgear r6260Match-

Node

netgear r6330_firmwareRange<1.1.0.84

AND

netgear r6330Match-

Node

netgear r6350_firmwareRange<1.1.0.84

AND

netgear r6350Match-

Node

netgear r6700v2_firmwareRange<1.2.0.88

AND

netgear r6700v2Match-

Node

netgear r6800_firmwareRange<1.2.0.88

AND

netgear r6800Match-

Node

netgear r6850_firmwareRange<1.1.0.84

AND

netgear r6850Match-

Node

netgear r6900v2_firmwareRange<1.2.0.88

AND

netgear r6900v2Match-

Node

netgear r7200_firmwareRange<1.2.0.88

AND

netgear r7200Match-

Node

netgear r7350_firmwareRange<1.2.0.88

AND

netgear r7350Match-

Node

netgear r7400_firmwareRange<1.2.0.88

AND

netgear r7400Match-

Node

netgear r7450_firmwareRange<1.2.0.88

AND

netgear r7450Match-

Source	Link
kb	www.kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133

Parameter	Position	Path	Description	CWE
next_file	query param	setup.cgi	Endpoint used to trigger the PNPX_GetShareFolderList flow that leaks admin credentials
x	query param	setup.cgi	Endpoint used to trigger the PNPX_GetShareFolderList flow that leaks admin credentials
todo	header	setup.cgi	Endpoint used to enable telnet by sending an authenticated request (authorization header) after login

21 Nov 2024 06:32Current

9.5High risk

Vulners AI Score9.5

CVSS 3.16.8 - 9.8

CVSS 210

EPSS0.47997

netgear authentication bypass vulnerability cve-2021-45511 nvd