CVE-2021-45511

CVSS 6.8 MEDIUMEPSS 17.6%◆ VulnCheck KEV

Vexday Risk Score

55Atenção

Decisão SSVC (CISA)

Act

Exploração + impacto → ação imediata

Maturidade do exploit

Exploit funcional

Exploit automatizável disponível (Nuclei/Metasploit).

CVSS 6.8EPSS 17.6%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

06 set 2021Exploit Metasploit disponível

26 dez 2021Publicada no NVD

Recomendação: Corrigir o quanto antes — há exploração ativa confirmada.

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N

Produtos afetados

n/a · n/a

Referências

https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133