CVE-2021-45511

🗓️ 26 Dec 2021 01:01:27Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 73 Views🌐 WEB

NETGEAR devices affected by authentication bypass CVE-2021-4551

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2021-45511	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication mechanism flaws. These flaws allow attackers to circumvent security restrictions.	25 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-45511	24 Sep 202120:20	–	circl
CNNVD	Netgear NETGEAR 授权问题漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45511	26 Dec 202101:01	–	cvelist
EUVD	EUVD-2021-32277	3 Oct 202520:07	–	euvd
Metasploit	Netgear PNPX_GetShareFolderList Authentication Bypass	25 Sep 202117:42	–	metasploit
NVD	CVE-2021-45511	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45511	26 Dec 202101:15	–	osv
Prion	Authentication flaw	26 Dec 202101:15	–	prion

NVD

Node

AND

netgear ac2100_firmwareRange<1.2.0.88

netgear ac2100Match-

Node

AND

netgear ac2400_firmwareRange<1.2.0.88

netgear ac2400Match-

Node

AND

netgear ac2600_firmwareRange<1.2.0.88

netgear ac2600Match-

Node

AND

netgear d7000_firmwareRange<1.0.1.80

netgear d7000Match-

Node

AND

netgear r6220_firmwareRange<1.1.0.110

netgear r6220Match-

Node

AND

netgear r6230_firmwareRange<1.1.0.110

netgear r6230Match-

Node

AND

netgear r6260_firmwareRange<1.1.0.84

netgear r6260Match-

Node

AND

netgear r6330_firmwareRange<1.1.0.84

netgear r6330Match-

Node

AND

netgear r6350_firmwareRange<1.1.0.84

netgear r6350Match-

Node

AND

netgear r6700v2_firmwareRange<1.2.0.88

netgear r6700v2Match-

Node

AND

netgear r6800_firmwareRange<1.2.0.88

netgear r6800Match-

Node

AND

netgear r6850_firmwareRange<1.1.0.84

netgear r6850Match-

Node

AND

netgear r6900v2_firmwareRange<1.2.0.88

netgear r6900v2Match-

Node

AND

netgear r7200_firmwareRange<1.2.0.88

netgear r7200Match-

Node

AND

netgear r7350_firmwareRange<1.2.0.88

netgear r7350Match-

Node

AND

netgear r7400_firmwareRange<1.2.0.88

netgear r7400Match-

Node

AND

netgear r7450_firmwareRange<1.2.0.88

netgear r7450Match-

Source	Link
kb	www.kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133

Parameter	Position	Path	Description	CWE
next_file	query param	/setup.cgi	Authentication bypass leakage via /setup.cgi to reveal admin credentials (used to login and enable telnet).
x	query param	/setup.cgi	Authentication bypass leakage via /setup.cgi to reveal admin credentials (used to login and enable telnet).

17 Jun 2026 04:13Current

9.5High risk

Vulners AI Score9.5

CVSS 3.16.8 - 9.8

CVSS 210

EPSS0.17641

netgear authentication bypass vulnerability cve-2021-45511 nvd