What’s Vulnerable › Vulnerabilities
CVE-2021-45511
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 18.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-12-26 · updated 2026-06-17
Description
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
Affected products
- NETGEAR Ac2100 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR Ac2400 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR Ac2600 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR D7000 Firmware: before 1.0.1.80 — fixed in 1.0.1.80
- NETGEAR R6220 Firmware: before 1.1.0.110 — fixed in 1.1.0.110
- NETGEAR R6230 Firmware: before 1.1.0.110 — fixed in 1.1.0.110
- NETGEAR R6260: before 1.1.0.84 — fixed in 1.1.0.84
- NETGEAR R6330 Firmware: before 1.1.0.84 — fixed in 1.1.0.84
- NETGEAR R6350 Firmware: before 1.1.0.84 — fixed in 1.1.0.84
- NETGEAR R6700V2 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R6800 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R6850 Firmware: before 1.1.0.84 — fixed in 1.1.0.84
- NETGEAR R6900V2 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R7200 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R7350 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R7400 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
- NETGEAR R7450 Firmware: before 1.2.0.88 — fixed in 1.2.0.88
How to fix
Upgrade to a fixed version: NETGEAR Ac2100 Firmware 1.2.0.88; NETGEAR Ac2400 Firmware 1.2.0.88; NETGEAR Ac2600 Firmware 1.2.0.88; NETGEAR D7000 Firmware 1.0.1.80; NETGEAR R6220 Firmware 1.1.0.110; NETGEAR R6230 Firmware 1.1.0.110; NETGEAR R6260 1.1.0.84; NETGEAR R6330 Firmware 1.1.0.84; NETGEAR R6350 Firmware 1.1.0.84; NETGEAR R6700V2 Firmware 1.2.0.88; NETGEAR R6800 Firmware 1.2.0.88; NETGEAR R6850 Firmware 1.1.0.84. Check the vendor advisory for mitigations.
References
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133
- https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133
Get alerted when CVE-2021-45511 or the next vulnerability affects your stack