CVE-2021-45499
Last modified
CVE-2021-45499 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.. EPSS estimates a 0.98% chance of exploitation in the next 30 days.
Description
Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R6900p Firmware | < 1.3.3.140 |
| Netgear | R7000p Firmware | < 1.3.3.140 |
| Netgear | R7900p Firmware | < 1.4.2.84 |
| Netgear | R7960p Firmware | < 1.4.2.84 |
| Netgear | R8000p Firmware | < 1.4.2.84 |
| Netgear | Rax75 Firmware | < 1.0.3.106 |
| Netgear | Rax80 Firmware | < 1.0.3.106 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-45499?
How severe is CVE-2021-45499?
How do I fix CVE-2021-45499?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-45493Certain NETGEAR devices are affected by disclosure of admini…7.5
- CVE-2021-45494Certain NETGEAR devices are affected by an attacker's abilit…4.5
- CVE-2021-45495NETGEAR D7000 devices before 1.0.1.68 are affected by authen…9.8
- CVE-2021-45496NETGEAR D7000 devices before 1.0.1.82 are affected by authen…9.8
- CVE-2021-45497NETGEAR D7000 devices before 1.0.1.82 are affected by authen…9.8
- CVE-2021-45498NETGEAR R6700v2 devices before 1.2.0.88 are affected by auth…9.8
- CVE-2021-45500Certain NETGEAR devices are affected by authentication bypas…8.8
- CVE-2021-45501Certain NETGEAR devices are affected by authentication bypas…9.8
- CVE-2021-45502Certain NETGEAR devices are affected by authentication bypas…8.8
- CVE-2021-45503Certain NETGEAR devices are affected by authentication bypas…8.8
- CVE-2021-45504Certain NETGEAR devices are affected by authentication bypas…9.8
- CVE-2021-45505Certain NETGEAR devices are affected by authentication bypas…8.8
Are you affected by CVE-2021-45499?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST