Command Injection Vulnerability in NETGEAR Router Products
CVE-2021-38521

6.1MEDIUM

Key Information:

Vendor
Netgear
Vendor
CVE Published:
11 August 2021

Summary

Certain NETGEAR router models are susceptible to a command injection vulnerability that can be exploited by an authenticated user. This security flaw allows users to execute arbitrary commands on the affected devices, posing serious risks to network integrity and user data. The vulnerability impacts specific firmware versions of models including R6400, R7900P, R8000P, RAX75, and RAX80, necessitating urgent updates to mitigate potential exploitation.

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.