Lucene search

[email protected]CVE-2021-45539

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45539

2021-12-2601:15:00

CWE-77

[email protected]

web.nvd.nist.gov

cve-2021-45539

netgear

command injection

authenticated user

vulnerability

security advisory

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

5.2 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.74, R8000P before 1.4.2.84, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.28, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.28, and RAX75 before 1.0.3.106.

CPENameOperatorVersion
netgear:r7900p_firmwarenetgear r7900p firmwarelt1.4.2.84
netgear:r7960p_firmwarenetgear r7960p firmwarelt1.4.2.84
netgear:r8000_firmwarenetgear r8000 firmwarelt1.0.4.74
netgear:r8000p_firmwarenetgear r8000p firmwarelt1.4.2.84
netgear:mr60_firmwarenetgear mr60 firmwarelt1.0.6.110
netgear:rax20_firmwarenetgear rax20 firmwarelt1.0.2.82
netgear:rax45_firmwarenetgear rax45 firmwarelt1.0.2.28
netgear:rax80_firmwarenetgear rax80 firmwarelt1.0.3.106
netgear:rax15_firmwarenetgear rax15 firmwarelt1.0.2.82
netgear:rax50_firmwarenetgear rax50 firmwarelt1.0.2.28

CPE	Name	Operator	Version
netgear:r7900p_firmware	netgear r7900p firmware	lt	1.4.2.84
netgear:r7960p_firmware	netgear r7960p firmware	lt	1.4.2.84
netgear:r8000_firmware	netgear r8000 firmware	lt	1.0.4.74
netgear:r8000p_firmware	netgear r8000p firmware	lt	1.4.2.84
netgear:mr60_firmware	netgear mr60 firmware	lt	1.0.6.110
netgear:rax20_firmware	netgear rax20 firmware	lt	1.0.2.82
netgear:rax45_firmware	netgear rax45 firmware	lt	1.0.2.28
netgear:rax80_firmware	netgear rax80 firmware	lt	1.0.3.106
netgear:rax15_firmware	netgear rax15 firmware	lt	1.0.2.82
netgear:rax50_firmware	netgear rax50 firmware	lt	1.0.2.28

Rows per page:

1-10 of 121

References

kb.netgear.com/000064476/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0195

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

5.2 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2021-45539

cvelist1 prion1