CVE-2021-45511

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08...

6.8 Medium

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

18.9%Up 18.5 points since Dec 26, 2021

What each source reports

CVE List Score used 6.8

Record: CVE-2021-45511
CVSS 3.1: 6.8 MediumCVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Updated: 2026-11-02

EUVDEUVD-2021-32277 6.8

Record: EUVD-2021-32277
CVSS 3.1: 6.8 MediumCVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wr8v-6jgr-244v 9.8

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08...

Record: GHSA-wr8v-6jgr-244v
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

NVD 6.8

Record: CVE-2021-45511
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

Affected products

Show 5 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Netgear PNPX_GetShareFolderList Authentication Bypass	2021-09-06

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-45511 is a medium vulnerability (CVSS 6.8) in Netgear Ac2100 Firmware, published December 26, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.9%, the 97th percentile. No source names a fixed version.