PT-2021-5919

CVE-2021-45613

·

Published

2021-09-26

·

Updated

2022-01-07

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR D7000v2 versions prior to 1.0.0.74 NETGEAR LAX20 versions prior to 1.1.6.28 NETGEAR MK62 versions prior to 1.0.6.116 NETGEAR MR60 versions prior to 1.0.6.116 NETGEAR MS60 versions prior to 1.0.6.116 NETGEAR MR80 versions prior to 1.1.2.20 NETGEAR MS80 versions prior to 1.1.2.20 NETGEAR RAX15 versions prior to 1.0.3.96 NETGEAR RAX20 versions prior to 1.0.3.96 NETGEAR RAX200 versions prior to 1.0.4.120 NETGEAR RAX45 versions prior to 1.0.3.96 NETGEAR RAX50 versions prior to 1.0.3.96 NETGEAR RAX43 versions prior to 1.0.3.96 NETGEAR RAX40v2 versions prior to 1.0.3.96 NETGEAR RAX35v2 versions prior to 1.0.3.96 NETGEAR RAX75 versions prior to 1.0.4.120 NETGEAR RAX80 versions prior to 1.0.4.120 NETGEAR RBK752 versions prior to 3.2.17.12 NETGEAR RBR750 versions prior to 3.2.17.12 NETGEAR RBS750 versions prior to 3.2.17.12 NETGEAR RBK852 versions prior to 3.2.17.12 NETGEAR RBR850 versions prior to 3.2.17.12 NETGEAR RBS850 versions prior to 3.2.17.12 NETGEAR XR1000 versions prior to 1.0.0.58
Description The issue is related to command injection by an unauthenticated attacker due to insufficient input data cleaning. This allows a remote attacker to execute arbitrary commands.
Recommendations For NETGEAR CBR40 versions prior to 2.5.0.24, update to version 2.5.0.24 or later. For NETGEAR CBR750 versions prior to 4.6.3.6, update to version 4.6.3.6 or later. For NETGEAR D7000v2 versions prior to 1.0.0.74, update to version 1.0.0.74 or later. For NETGEAR LAX20 versions prior to 1.1.6.28, update to version 1.1.6.28 or later. For NETGEAR MK62 versions prior to 1.0.6.116, update to version 1.0.6.116 or later. For NETGEAR MR60 versions prior to 1.0.6.116, update to version 1.0.6.116 or later. For NETGEAR MS60 versions prior to 1.0.6.116, update to version 1.0.6.116 or later. For NETGEAR MR80 versions prior to 1.1.2.20, update to version 1.1.2.20 or later. For NETGEAR MS80 versions prior to 1.1.2.20, update to version 1.1.2.20 or later. For NETGEAR RAX15 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX20 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX200 versions prior to 1.0.4.120, update to version 1.0.4.120 or later. For NETGEAR RAX45 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX50 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX43 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX40v2 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX35v2 versions prior to 1.0.3.96, update to version 1.0.3.96 or later. For NETGEAR RAX75 versions prior to 1.0.4.120, update to version 1.0.4.120 or later. For NETGEAR RAX80 versions prior to 1.0.4.120, update to version 1.0.4.120 or later. For NETGEAR RBK752 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR RBR750 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR RBS750 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR RBK852 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR RBR850 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR RBS850 versions prior to 3.2.17.12, update to version 3.2.17.12 or later. For NETGEAR XR1000 versions prior to 1.0.0.58, update to version 1.0.0.58 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾