CVE-2021-45511 in netgear ac2100 firmware
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.
Affected software: netgear ac2100 firmware, netgear ac2400 firmware, netgear ac2600 firmware, netgear d7000 firmware, netgear r6220 firmware, netgear r6230 firmware, netgear r6260 firmware, netgear r6330 firmware, netgear r6350 firmware, netgear r6700v2 firmware
Scores
- CVSS: 9.8 (critical)
- EPSS: 18.88% chance of exploitation in the next 30 days
- CISA KEV: Not listed
- Published: 2021-12-26
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.