CVE-2021-45603: NETGEAR d7800 Firmware

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130, XR500 before 2.3.2.130, and XR700 before 1.0.1.46.

Affected products

NETGEAR d7800 Firmware: before 1.0.1.66 (fixed in 1.0.1.66)
NETGEAR EX2700 Firmware: before 1.0.1.68 (fixed in 1.0.1.68)
NETGEAR LBR1020 Firmware: before 2.6.5.20 (fixed in 2.6.5.20)
NETGEAR LBR20 Firmware: before 2.6.5.32 (fixed in 2.6.5.32)
NETGEAR r6700ax Firmware: before 1.0.10.110 (fixed in 1.0.10.110)
NETGEAR r7800 Firmware: before 1.0.2.86 (fixed in 1.0.2.86)
NETGEAR r8900 Firmware: before 1.0.5.38 (fixed in 1.0.5.38)
NETGEAR r9000 Firmware: before 1.0.5.38 (fixed in 1.0.5.38)
NETGEAR RAX10 Firmware: before 1.0.10.110 (fixed in 1.0.10.110)
NETGEAR RAX120V1 Firmware: before 1.2.3.28 (fixed in 1.2.3.28)
NETGEAR RAX120V2 Firmware: before 1.2.3.28 (fixed in 1.2.3.28)
NETGEAR RAX70 Firmware: before 1.0.10.110 (fixed in 1.0.10.110)
NETGEAR RAX78 Firmware: before 1.0.10.110 (fixed in 1.0.10.110)
NETGEAR WN3000RPV2 Firmware: before 1.0.0.90 (fixed in 1.0.0.90)
NETGEAR WN3000RPV3 Firmware: before 1.0.2.100 (fixed in 1.0.2.100)
NETGEAR XR450 Firmware: before 2.3.2.130 (fixed in 2.3.2.130)
NETGEAR XR500 Firmware: before 2.3.2.130 (fixed in 2.3.2.130)
NETGEAR XR700 Firmware: before 1.0.1.46 (fixed in 1.0.1.46)

Published 2021-12-26. Last modified 2026-06-17.