CVE-2021-45499
High
Published: 26 December 2021
Published
26 December 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.2
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
EPSS Score
0.0051
67.0th percentile
Risk Priority
17
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-45499 is a high-severity an unspecified weakness vulnerability in Netgear R6900P Firmware. Its CVSS base score is 8.2 (High).
Operationally, ranked in the top 33.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-32265
Vulnerability details
Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000P before 1.4.2.84, RAX75 before 1.0.3.106, and RAX80 before 1.0.3.106.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
netgear
r6900p firmware
≤ 1.3.3.140
netgear
r7000p firmware
≤ 1.3.3.140
netgear
r7900p firmware
≤ 1.4.2.84
netgear
r7960p firmware
≤ 1.4.2.84
netgear
r8000p firmware
≤ 1.4.2.84
netgear
rax75 firmware
≤ 1.0.3.106
netgear
rax80 firmware
≤ 1.0.3.106
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.