Command Injection Vulnerability in NETGEAR WiFi Systems

CVE-2021-45560

Summary

Certain NETGEAR networking devices are subject to command injection vulnerabilities when accessed by an authenticated user. This issue allows attackers to execute arbitrary commands, potentially leading to unauthorized access and manipulation of the system. Devices affected include RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, all of which are vulnerable if not updated to version 3.2.16.6 or higher. Users are encouraged to update their devices promptly to mitigate risks associated with this vulnerability.

References