What is CVE-2021-34977?

CVE-2021-34977 is a high-severity vulnerability in NETGEAR R7000, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 8.8/10. Published 2022-01-13.

How severe is CVE-2021-34977?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in NETGEAR R7000

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.

EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Netgear R7000 — versions 1.0.11.116_10.2.100
Netgear R7000_firmware — versions 1.0.11.116_10.2.100

Weakness classification (CWE)

References

zdi-disclosures@trendmicro.com (VDB Entry, Third Party Advisory, x_refsource_MISC)
zdi-disclosures@trendmicro.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34977?: CVE-2021-34977 is a high-severity vulnerability in NETGEAR R7000, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 8.8/10. Published 2022-01-13.
How severe is CVE-2021-34977?: High severity. CVSS v3 base score is 8.8 out of 10.