The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000, XR300 lies in the absence of measures to sanitize input data. This allows attackers to execute arbitrary commands.

🗓️ 26 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

NETGEAR built-in router software lacks input sanitization, allowing remote attackers to execute arbitrary commands.

Reporter	Title	Published	Views	Family All 7
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45612	26 Dec 202100:36	–	cve
Cvelist	CVE-2021-45612	26 Dec 202100:36	–	cvelist
EUVD	EUVD-2021-32378	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45612	26 Dec 202101:15	–	nvd
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45612	22 May 202521:10	–	redhatcve

Vulners

Node

netgear r6700v3Range<1.0.4.118

netgear r6900pRange<1.3.3.140

netgear r7000pRange<1.3.3.140

netgear rs400Range<1.5.1.80

netgear r7960pRange<1.4.2.84

netgear xr300Range<1.0.3.68

netgear xr1000Range<1.0.0.58

netgear cbr750Range<4.6.3.6

netgear rbk752Range<3.2.17.12

netgear rbr750Range<3.2.17.12

netgear rbs750Range<3.2.17.12

netgear rbk852Range<3.2.17.12

netgear rbr850Range<3.2.17.12

netgear rbs850Range<3.2.17.12

netgear cbr40Range<2.5.0.24

netgear r7850Range<1.0.5.74

netgear r7900pRange<1.4.2.84

netgear r8000Range<1.0.4.74

netgear r8000pRange<1.4.2.84

netgear rax200Range<1.0.4.120

netgear rax75Range<1.0.4.120

netgear rax80Range<1.0.4.120

netgear r7000Range<1.0.11.126

netgear lax20Range<1.1.6.28

netgear r6400v2Range<1.0.4.118

netgear rax15Range<1.0.3.96

netgear rax20Range<1.0.3.96

netgear rax35v2Range<1.0.3.96

netgear rax40v2Range<1.0.3.96

netgear rax43Range<1.0.3.96

netgear rax45Range<1.0.3.96

netgear rax50Range<1.0.3.96

netgear eax20Range<1.0.0.58

netgear eax80Range<1.0.1.68

netgear mr60Range<1.0.6.116

netgear ms60Range<1.0.6.116

netgear mk62Range<1.0.6.116

netgear r7900Range<1.0.4.46

netgear ex7500Range<1.0.0.74

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45612
kb	www.kb.netgear.com/000064515/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Router-Extenders-and-WiFi-Systems-PSV-2020-0524
web	www.web.nvd.nist.gov/view/vuln/detail

26 Jan 2022 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 28.3

CVSS 39.6

EPSS0.02487