Authentication Bypass in NETGEAR Routers
CVE-2021-45499

8.2HIGH

Key Information:

Vendor
Netgear
Status
R6900p Firmware
Vendor
CVE Published:
26 December 2021

Summary

Certain NETGEAR router models are susceptible to an authentication bypass vulnerability, enabling unauthorized users to gain access to the device without proper authentication. This could allow attackers to modify settings, access sensitive data, and potentially exploit connected networks. Users of affected models are advised to upgrade to the latest firmware versions to mitigate potential risks.

References

https://kb.netgear.com/000064445/Security-Advisory-for-Au...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.