CVE-2021-34977: NETGEAR R7000 SOAP ParentalControl Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.11610.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password. Was ZDI-CAN-13483.
Other sources
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of proper authentication verification before performing a password reset. An attacker can leverage this vulnerability to reset the admin password.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-34977?
CVE-2021-34977 is a vulnerability that allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers.
What is the severity of CVE-2021-34977?
The severity of CVE-2021-34977 is high with a CVSS score of 8.8.
How does CVE-2021-34977 work?
CVE-2021-34977 allows attackers to bypass authentication by exploiting a flaw in the processing of SOAP requests on affected NETGEAR R7000 routers.
Which software versions are affected by CVE-2021-34977?
The vulnerability affects NETGEAR R7000 routers running firmware version 1.0.11.116_10.2.100.
Is authentication required to exploit CVE-2021-34977?
No, authentication is not required to exploit CVE-2021-34977.