Command Injection Vulnerability in NETGEAR Routers and Extenders
CVE-2021-45617
9.8CRITICAL
Summary
Certain NETGEAR devices are vulnerable to command injection attacks due to insufficient input validation, allowing unauthenticated attackers to execute arbitrary commands on affected routers and extenders. This security flaw impacts multiple models and versions, highlighting the need for regular updates and vigilance in network security management. Affected devices include various NETGEAR routers and extenders which could be exploited if not promptly addressed.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved