Command Injection Vulnerability in NETGEAR Router Products
CVE-2021-38521
6.1MEDIUM
Summary
Certain NETGEAR router models are susceptible to a command injection vulnerability that can be exploited by an authenticated user. This security flaw allows users to execute arbitrary commands on the affected devices, posing serious risks to network integrity and user data. The vulnerability impacts specific firmware versions of models including R6400, R7900P, R8000P, RAX75, and RAX80, necessitating urgent updates to mitigate potential exploitation.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved