CVE-2021-34865

🗓️ 25 Jan 2022 16:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 8 Views

NETGEAR routers vulnerability, authentication bypass, privilege escalation

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-34865	25 Jan 202218:18	–	circl
CNNVD	NETGEAR 授权问题漏洞	30 Aug 202100:00	–	cnnvd
CVE	CVE-2021-34865	25 Jan 202215:30	–	cve
Cvelist	CVE-2021-34865	25 Jan 202215:30	–	cvelist
EUVD	EUVD-2021-21512	7 Oct 202500:30	–	euvd
OSV	CVE-2021-34865	25 Jan 202216:15	–	osv
Prion	Authentication flaw	25 Jan 202216:15	–	prion
Positive Technologies	PT-2021-20710 · NetGear · Netgear Routers	30 Aug 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-34865	22 May 202521:34	–	redhatcve
Zero Day Initiative	NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability	30 Aug 202100:00	–	zdi

NVD

Node

netgear ac2100_firmwareRange<1.2.0.88

AND

netgear ac2100Match-

Node

netgear ac2400_firmwareRange<1.2.0.88

AND

netgear ac2400Match-

Node

netgear ac2600_firmwareRange<1.2.0.88

AND

netgear ac2600Match-

Node

netgear d7000v1_firmwareRange<1.0.1.80

AND

netgear d7000v1Match-

Node

netgear r6220_firmwareRange<1.1.0.110

AND

netgear r6220Match-

Node

netgear r6230_firmwareRange<1.1.0.110

AND

netgear r6230Match-

Node

netgear r6260_firmwareRange<1.1.0.84

AND

netgear r6260Match-

Node

netgear r6330_firmwareRange<1.1.0.84

AND

netgear r6330Match-

Node

netgear r6350_firmwareRange<1.1.0.84

AND

netgear r6350Match-

Node

netgear r6700v2_firmwareRange<1.2.0.88

AND

netgear r6700v2Match-

Node

netgear r6800_firmwareRange<1.2.0.88

AND

netgear r6800Match-

Node

netgear r6850_firmwareRange<1.1.0.84

AND

netgear r6850Match-

Node

netgear r6900v2_firmwareRange<1.2.0.88

AND

netgear r6900v2Match-

Node

netgear r7200_firmwareRange<1.2.0.88

AND

netgear r7200Match-

Node

netgear r7350_firmwareRange<1.2.0.88

AND

netgear r7350Match-

Node

netgear r7400_firmwareRange<1.2.0.88

AND

netgear r7400Match-

Node

netgear r7450_firmwareRange<1.2.0.88

AND

netgear r7450Match-

Source	Link
kb	www.kb.netgear.com/000063955/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-Some-Routers-PSV-2021-0083
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1051/

21 Nov 2024 06:11Current

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.01148

CWE-287 CWE-697

cve-2021-34865 network adjacent attackers mini_httpd service tcp port 80 string matching logic privilege escalation arbitrary code execution zdi-can-13313