Command Injection Vulnerability in NETGEAR Routers
CVE-2021-45553

8.7HIGH

Key Information:

Vendor
Netgear
Status
R7000 Firmware
Vendor
CVE Published:
26 December 2021

Summary

Certain NETGEAR devices are susceptible to command injection attacks, which can be executed by an authenticated user. This vulnerability allows unauthorized execution of commands on the affected firmware versions of the routers. Specifically, the R7000 versions prior to 1.0.11.126, R6900P versions before 1.3.2.126, and R7000P versions earlier than 1.3.2.126 are impacted. Users are advised to update their devices to the latest firmware to mitigate this security risk.

References

https://kb.netgear.com/000064074/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.