Command Injection Vulnerability in NETGEAR Routers
CVE-2021-38520

6.6MEDIUM

Key Information:

Vendor
Netgear
Status
R6400 Firmware
Vendor
CVE Published:
11 August 2021

Summary

Certain NETGEAR routers are vulnerable to command injection attacks that can be exploited by an authenticated user. This vulnerability affects several models, allowing unauthorized execution of commands that could compromise the device's integrity and security. Users are urged to upgrade to patched versions to protect their networks.

References

https://kb.netgear.com/000063763/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.