CVE-2021-45511: NETGEAR AC2100 Firmware

Critical severity, CVSS 9.8. EPSS: 17.6% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.

Affected products

NETGEAR AC2100 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR AC2400 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR AC2600 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR d7000 Firmware: before 1.0.1.80 (fixed in 1.0.1.80)
NETGEAR r6220 Firmware: before 1.1.0.110 (fixed in 1.1.0.110)
NETGEAR r6230 Firmware: before 1.1.0.110 (fixed in 1.1.0.110)
NETGEAR r6260 Firmware: before 1.1.0.84 (fixed in 1.1.0.84)
NETGEAR r6330 Firmware: before 1.1.0.84 (fixed in 1.1.0.84)
NETGEAR r6350 Firmware: before 1.1.0.84 (fixed in 1.1.0.84)
NETGEAR r6700v2 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r6800 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r6850 Firmware: before 1.1.0.84 (fixed in 1.1.0.84)
NETGEAR r6900v2 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r7200 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r7350 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r7400 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)
NETGEAR r7450 Firmware: before 1.2.0.88 (fixed in 1.2.0.88)

Published 2021-12-26. Last modified 2026-06-17.