CVE-2021-45498

CWE-287 — Improper Authentication3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.3%
top 51.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear R6700v2 Firmware
Timeline
PublishedDec 26
Latest updateDec 27

Description

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDnetgear/r6700v2_firmware< 1.2.0.88

Patches

Patch: kb.netgear.com ↗Patch: kb.netgear.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x279-p549-h2x4: NETGEAR R6700v2 devices before 1↗2021-12-27
▶
CVEList
CVE-2021-45498: NETGEAR R6700v2 devices before 1↗2021-12-26
▶