{"vulnerability": "CVE-2021-45511", "sightings": [{"uuid": "24ec097b-fcba-47a3-968c-2353b125c02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45511", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:59.000000Z"}, {"uuid": "e962f80b-3d44-4f21-a04a-eab005e27784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45511", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgear_pnpx_getsharefolderlist_auth_bypass.rb", "content": "", "creation_timestamp": "2021-09-24T20:20:16.000000Z"}, {"uuid": "5ff6bb45-e768-43f9-9879-efb60f02b64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45511", "type": "seen", "source": "https://t.me/cibsecurity/34643", "content": "\u203c CVE-2021-45511 \u203c\n\nCertain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 before 2021-08-27, R6330 before 2021-08-27, R6350 before 2021-08-27, R6700v2 before 2021-08-27, R6800 before 2021-08-27, R6850 before 2021-08-27, R6900v2 before 2021-08-27, R7200 before 2021-08-27, R7350 before 2021-08-27, R7400 before 2021-08-27, and R7450 before 2021-08-27.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-26T07:35:21.000000Z"}, {"uuid": "f52b3a12-a684-4b92-828b-bf0735836837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45511", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgear_pnpx_getsharefolderlist_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Unknown\", \"Grant Willcox\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module targets an authentication bypass vulnerability in the mini_http binary of several Netgear Routers\\n          running firmware versions prior to 1.2.0.88, 1.0.1.80, 1.1.0.110, and 1.1.0.84. The vulnerability allows\\n          unauthenticated attackers to reveal the password for the admin user that is used to log into the\\n          router's administrative portal, in plaintext.\\n\\n          Once the password has been been obtained, the exploit enables telnet on the target router and then utiltizes\\n          the auxiliary/scanner/telnet/telnet_login module to log into the router using the stolen credentials of the\\n          admin user. This will result in the attacker obtaining a new telnet session as the \\\"root\\\" user.\\n\\n          This vulnerability was discovered and exploited by an independent security researcher who reported it to SSD.\", \"disclosure_date\": \"2021-09-06\", \"fullname\": \"auxiliary/admin/http/netgear_pnpx_getsharefolderlist_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-05-10 09:25:30 +0000\", \"name\": \"Netgear PNPX_GetShareFolderList Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"RelatedModules\": [\"exploit/linux/telnet/netgear_telnetenable\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/netgear_pnpx_getsharefolderlist_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/netgear_pnpx_getsharefolderlist_auth_bypass\", \"references\": [\"CVE-2021-45511\", \"URL-https://kb.netgear.com/000063961/Security-Advisory-for-Authentication-Bypass-Vulnerability-on-the-D7000-and-Some-Routers-PSV-2021-0133\", \"URL-https://ssd-disclosure.com/ssd-advisory-netgear-d7000-authentication-bypass/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:48.256909Z"}]}