Command Injection Vulnerability in NETGEAR Routers and Extenders
CVE-2021-45617

9.8CRITICAL

Key Information:

Vendor

Netgear
Status
Cbr40 Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-45617?

Certain NETGEAR devices are vulnerable to command injection attacks due to insufficient input validation, allowing unauthenticated attackers to execute arbitrary commands on affected routers and extenders. This security flaw impacts multiple models and versions, highlighting the need for regular updates and vigilance in network security management. Affected devices include various NETGEAR routers and extenders which could be exploited if not promptly addressed.

References

https://kb.netgear.com/000064505/Security-Advisory-for-Pr...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.