Skip to main content

R6700V2 Firmware CVE-2021-45498

CRITICAL
2021-12-26 cve@mitre.org
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 26, 2021 - 01:15 nvd
CRITICAL 9.8

DescriptionNVD

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

AnalysisAI

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. Affected products include: Netgear R6700V2 Firmware. Version information: before 1.2.0.88.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2021-45511 CRITICAL POC
9.8 Dec 26

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2021-45644 CRITICAL
9.8 Dec 26

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8)

CVE-2021-45637 CRITICAL
9.8 Dec 26

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical sev

CVE-2021-45501 CRITICAL
9.8 Dec 26

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2020-35799 CRITICAL
9.8 Dec 30

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical sev

CVE-2020-35795 CRITICAL
9.8 Dec 30

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS

CVE-2020-26908 CRITICAL
9.8 Oct 09

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is

CVE-2020-35800 CRITICAL
9.4 Dec 30

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.4)

CVE-2021-45551 HIGH
8.8 Dec 26

Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this

CVE-2020-26912 HIGH
8.8 Oct 09

Certain NETGEAR devices are affected by CSRF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable

CVE-2020-26911 HIGH
8.8 Oct 09

Certain NETGEAR devices are affected by lack of access control at the function level. Rated high severity (CVSS 8.8), th

CVE-2021-45657 HIGH
7.8 Dec 26

Certain NETGEAR devices are affected by server-side injection. Rated high severity (CVSS 7.8), this vulnerability is low

Share

CVE-2021-45498 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy