CVE-2021-34977

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 version 1.0.11.116 10.2.100 NETGEAR D7000v2 (affected versions not specified) NETGEAR R6400 (affected versions not specified) NETGEAR R6400v2 (affected versions not specified) NETGEAR R6700v3 (affected versions not specified) NETGEAR R6900P (affected versions not specified) NETGEAR R7000P (affected versions not specified) NETGEAR R8300 (affected versions not specified) NETGEAR R8500 (affected versions not specified) NETGEAR RS400 (affected versions not specified) NETGEAR XR300 (affected versions not specified)

Description This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the processing of SOAP requests, resulting from the lack of proper authentication verification before performing a password reset. An attacker can leverage this issue to reset the admin password. The vulnerability is related to deficiencies in the authentication procedure before executing a password reset.

Recommendations For NETGEAR R7000 version 1.0.11.116 10.2.100, consider disabling the SOAP request processing functionality until a patch is available. For other affected NETGEAR models, at the moment, there is no information about a newer version that contains a fix for this issue.