Command Injection Vulnerability in NETGEAR Router Products
CVE-2021-38521

6.1MEDIUM

Key Information:

Vendor

Netgear
Status
R6400 Firmware
Vendor
CVE Published:
11 August 2021

What is CVE-2021-38521?

Certain NETGEAR router models are susceptible to a command injection vulnerability that can be exploited by an authenticated user. This security flaw allows users to execute arbitrary commands on the affected devices, posing serious risks to network integrity and user data. The vulnerability impacts specific firmware versions of models including R6400, R7900P, R8000P, RAX75, and RAX80, necessitating urgent updates to mitigate potential exploitation.

References

https://kb.netgear.com/000063764/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.