Rax45
Vendor:
First CVE: Dec 30, 2020 · Active for 5 years
39
Total CVEs
More Total CVEs than 97% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rax45 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 30, 2020
5 years ago
Most Recent CVE
Jun 9, 2026
46 days ago
CVE Severity & Scoring
Rax4539 CVEs
38%
33%
28%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (2.6%)
Network22 (56.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network16 (41.0%)
Attack Complexity
Low38 (97.4%)
High1 (2.6%)
Unknown0 (0.0%)
User Interaction
None33 (84.6%)
Unknown0 (0.0%)
Required6 (15.4%)
Privileges Required
Low5 (12.8%)
High15 (38.5%)
None19 (48.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (39 CVEs).
39 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-45610CRITICAL Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.66, D6400 before 1.0.0.100, D7000v2 before 1.0.0.66, D8500 | Dec 26, 2021 | 9.8 | 31 | NO | NO |
CVE-2021-45622CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45621CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 b | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45620CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45616CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45614CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 b | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45613CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20 | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-45612CRITICAL Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 be | Dec 26, 2021 | 9.8 | 30 | NO | NO |
CVE-2021-34991HIGH This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not require | Nov 15, 2021 | 8.8 | 29 | NO | NO |
CVE-2021-29068HIGH Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before 1.0.11.106, R6900P b | Mar 23, 2021 | 8.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (39 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (39 CVEs).
Media Mentions
Signals from CVEs in this product scope (39 CVEs).
Top CNAs Publishing CVEs For Rax45
Top CWEs
Versions
No cataloged versions.