The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, and EX6420 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

🗓️ 25 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Embedded router software flaw from insufficient input cleaning enables remote command execution.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-45618	26 Dec 202101:15	–	attackerkb
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45618	26 Dec 202100:35	–	cve
Cvelist	CVE-2021-45618	26 Dec 202100:35	–	cvelist
EUVD	EUVD-2021-32384	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45618	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45618	26 Dec 202101:15	–	osv
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45618	22 May 202521:09	–	redhatcve

Vulners

Node

netgear ex6200v2Range<1.0.1.86

netgear r8900Range<1.0.5.26

netgear lbr20Range<2.6.3.50

netgear rbr50Range<2.7.2.102

netgear rbk50Range<2.7.2.102

netgear ex6250Range<1.0.0.134

netgear ex7700Range<1.0.0.216

netgear ex8000Range<1.0.1.232

netgear r7800Range<1.0.2.80

netgear r9000Range<1.0.5.26

netgear rax120Range<1.2.0.16

netgear outdoor_satellite_(rbs50y)Range<1.0.0.56

netgear wnr2000v5Range<1.0.0.76

netgear xr450Range<2.3.2.114

netgear xr500Range<2.3.2.114

netgear xr700Range<1.0.1.36

netgear ex6150v2Range<1.0.1.98

netgear ex7300Range<1.0.2.158

netgear ex7320Range<1.0.0.134

netgear ex6100v2Range<1.0.1.98

netgear ex6400Range<1.0.2.158

netgear ex7300v2Range<1.0.0.134

netgear ex6410Range<1.0.0.134

netgear rbr10Range<2.6.1.44

netgear rbr20Range<2.6.2.104

netgear rbr40Range<2.6.2.104

netgear ex6420Range<1.0.0.134

netgear rbs10Range<2.6.1.44

netgear rbs20Range<2.6.2.104

netgear rbs40Range<2.6.2.104

netgear rbs50Range<2.7.2.102

netgear ex6400v2Range<1.0.0.134

netgear rbk12Range<2.6.1.44

netgear rbk20Range<2.6.2.104

netgear rbk40Range<2.6.2.104

netgear d7800Range<1.0.1.64

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45618
kb	www.kb.netgear.com/000064490/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0422
web	www.web.nvd.nist.gov/view/vuln/detail

08 Sep 2025 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 28.3

CVSS 39.6

EPSS0.0202