What is CVE-2021-34977?

CVE-2021-34977 is a high-severity vulnerability in NETGEAR R7000, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 8.8/10. Published 2022-01-13.

How severe is CVE-2021-34977?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in NETGEAR R7000

CVE-2021-34977

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.

Published 2022-01-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.011 (65.6th percentile), scored 2026-10-02.

Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 65.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000

Affected products

NETGEAR R7000 — versions 1.0.11.116_10.2.100
NETGEAR R7000 Firmware — versions 1.0.11.116_10.2.100

Weakness classification (CWE)

References

www.zerodayinitiative.com/advisories/ZDI-21-1239/ (VDB Entry, Third Party Advisory)
kb.netgear.com/000064046/Security-Advisory-for-Authentication-Bypass-on-Some-Ro… (Vendor Advisory)

Frequently asked questions

What is CVE-2021-34977?: CVE-2021-34977 is a high-severity vulnerability in NETGEAR R7000, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 8.8/10. Published 2022-01-13.
How severe is CVE-2021-34977?: High severity. CVSS v3 base score is 8.8 out of 10.