What is CVE-2021-45512?

CVE-2021-45512 is a high-severity vulnerability in Netgear D7000, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 8.6/10. Published 2021-12-26.

How severe is CVE-2021-45512?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Netgear D7000

CVE-2021-45512

Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, EX3700 before 1.0.0.84, EX3800 before 1.0.0.84, EX6120 before 1.0.0.54, EX6130 before 1.0.0.36, EX7000 before 1.0.1.90…

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.005 (41.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L.

Affected products

Netgear D7000 — versions v2
Netgear D7000_firmware
Netgear D8500
Netgear D8500_firmware
Netgear Ex3700
Netgear Ex3700_firmware
Netgear Ex3800
Netgear Ex3800_firmware
Netgear Ex6120
Netgear Ex6120_firmware

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-45512?: CVE-2021-45512 is a high-severity vulnerability in Netgear D7000, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 8.6/10. Published 2021-12-26.
How severe is CVE-2021-45512?: High severity. CVSS v3 base score is 8.6 out of 10.