CVE-2021-45539

🗓️ 26 Dec 2021 00:54:11Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 48 Views

CVE-2021-45539 affects certain NETGEAR devices allowing command injection by authenticated users

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-45539	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerability of the embedded software of NETGEAR routers such as R7900P, R7960P, R8000, R8000P, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75 lies in the lack of measures to sanitize input data. This allows a hacker to execute arbitrary commands.	9 Mar 202200:00	–	bdu_fstec
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45539	26 Dec 202100:54	–	cvelist
EUVD	EUVD-2021-32305	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45539	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45539	26 Dec 202101:15	–	osv
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45539	22 May 202518:54	–	redhatcve

NVD

Node

netgear r7900p_firmwareRange<1.4.2.84

AND

netgear r7900pMatch-

Node

netgear r7960p_firmwareRange<1.4.2.84

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.74

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.2.84

AND

netgear r8000pMatch-

Node

netgear mr60_firmwareRange<1.0.6.110

AND

netgear mr60Match-

Node

netgear rax20_firmwareRange<1.0.2.82

AND

netgear rax20Match-

Node

netgear rax45_firmwareRange<1.0.2.28

AND

netgear rax45Match-

Node

netgear rax80_firmwareRange<1.0.3.106

AND

netgear rax80Match-

Node

netgear rax15_firmwareRange<1.0.2.82

AND

netgear rax15Match-

Node

netgear rax50_firmwareRange<1.0.2.28

AND

netgear rax50Match-

Node

netgear rax75_firmwareRange<1.0.3.106

AND

netgear rax75Match-

Node

netgear ms60_firmwareRange<1.0.6.110

AND

netgear ms60Match-

Source	Link
kb	www.kb.netgear.com/000064476/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0195

21 Nov 2024 06:32Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.2

CVSS 3.16.8 - 8.4

EPSS0.00136

cve-2021-45539 netgear command injection authenticated user vulnerability security advisory