CVE-2021-45499

published 2021-12-26

CVE-2021-45499: Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
netgear	r6900p_firmware	< 1.3.3.140	1.3.3.140
netgear	r7000p_firmware	< 1.3.3.140	1.3.3.140
netgear	r7900p_firmware	< 1.4.2.84	1.4.2.84
netgear	r7960p_firmware	< 1.4.2.84	1.4.2.84
netgear	r8000p_firmware	< 1.4.2.84	1.4.2.84
netgear	rax75_firmware	< 1.0.3.106	1.0.3.106
netgear	rax80_firmware	< 1.0.3.106	1.0.3.106

CWE-287