Authentication Bypass Vulnerability in NETGEAR D7000 Routers
CVE-2021-45496

9.1CRITICAL

Key Information:

Vendor

Netgear
Status
D7000 Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-45496?

NETGEAR D7000 routers prior to firmware version 1.0.1.82 are susceptible to an authentication bypass vulnerability which allows unauthorized access. This flaw could enable attackers to circumvent normal authentication procedures, possibly giving them control over the affected device and access to private data. It's crucial for users to update their devices to the latest firmware version to mitigate this risk. For more detailed information, refer to the official security advisory.

References

https://kb.netgear.com/000064529/Security-Advisory-for-Au...
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.