Command Injection Vulnerability in NETGEAR Routers and Extenders
CVE-2021-45617

9.8CRITICAL

Key Information:

Vendor
Netgear
Vendor
CVE Published:
26 December 2021

Summary

Certain NETGEAR devices are vulnerable to command injection attacks due to insufficient input validation, allowing unauthenticated attackers to execute arbitrary commands on affected routers and extenders. This security flaw impacts multiple models and versions, highlighting the need for regular updates and vigilance in network security management. Affected devices include various NETGEAR routers and extenders which could be exploited if not promptly addressed.

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.