The vulnerability of the embedded software of NETGEAR routers such as D7800, DM200, EX2700, EX6150v2, EX6200v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, R7500v2, R7800, R8900, R9000, RAX120, WN3000RPv2, WN3000RPv3, WNR2000v5, XR500, RBK20, RBR20, RBS20, RBK40, RBR40, and RBS40 lies in the absence of measures to clean incoming data. This allows a malicious actor to execute arbitrary commands.

NETGEAR router firmware lacks input cleaning, enabling remote arbitrary command execution.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-45548	26 Dec 202101:15	–	attackerkb
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45548	26 Dec 202100:52	–	cve
Cvelist	CVE-2021-45548	26 Dec 202100:52	–	cvelist
EUVD	EUVD-2021-32314	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45548	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45548	26 Dec 202101:15	–	osv
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45548	22 May 202521:10	–	redhatcve

Vulners

Node

netgear r9000Range<1.0.5.2

netgear d7800Range<1.0.1.60

netgear dm200Range<1.0.0.66

netgear ex2700Range<1.0.1.56

netgear ex6250Range<1.0.0.128

netgear ex6400Range<1.0.2.144

netgear ex6400v2Range<1.0.0.128

netgear ex6410Range<1.0.0.128

netgear ex6420Range<1.0.0.128

netgear ex7300Range<1.0.2.144

netgear ex7300v2Range<1.0.0.128

netgear ex7320Range<1.0.0.128

netgear r7500v2Range<1.0.3.46

netgear r7800Range<1.0.2.74

netgear r8900Range<1.0.5.26

netgear rax120Range<1.0.1.128

netgear xr500Range<2.3.2.66

netgear rbk20Range<2.7.3.22

netgear rbr20Range<2.7.3.22

netgear rbs20Range<2.7.3.22

netgear rbk40Range<2.7.3.22

netgear rbr40Range<2.7.3.22

netgear rbs40Range<2.7.3.22

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-45548
kb	www.kb.netgear.com/000064450/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2019-0207
web	www.web.nvd.nist.gov/view/vuln/detail

04 Mar 2022 00:00Current

8High risk

Vulners AI Score8

CVSS 38.8

CVSS 29

EPSS0.00954