CVE-2021-45556

🗓️ 26 Dec 2021 00:50:54Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 49 Views

Certain NETGEAR devices affected by authenticated command injection. Affects various models before specific versions

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2021-45556	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerability of the embedded software of NETGEAR routers such as GS108Tv2, GS110TPP, GS110TPv2, GS110TPv3, GS308T, GS310TP, GS724TPP, GS724TPv2, GS728TPPv2, GS728TPv2, GS752TPP, GS752TPv2, MS510TXM, and MS510TXUP arises from the lack of measures to sanitize input data. This allows a perpetrator to execute arbitrary commands.	9 Mar 202200:00	–	bdu_fstec
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45556	26 Dec 202100:50	–	cvelist
EUVD	EUVD-2021-32322	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45556	26 Dec 202101:15	–	nvd
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45556	22 May 202518:54	–	redhatcve

NVD

Node

netgear gs108tv2_firmwareRange<5.4.2.36

AND

netgear gs108tv2Match-

Node

netgear gs110tpp_firmwareRange<7.0.7.2

AND

netgear gs110tppMatch-

Node

netgear gs110tpv2_firmwareRange<5.4.2.36

AND

netgear gs110tpv2Match-

Node

netgear gs308t_firmwareRange<1.0.3.2

AND

netgear gs308tMatch-

Node

netgear gs110tpv3_firmwareRange<7.0.7.2

AND

netgear gs110tpv3Match-

Node

netgear gs310tp_firmwareRange<1.0.3.2

AND

netgear gs310tpMatch-

Node

netgear gs724tpp_firmwareRange<2.0.6.3

AND

netgear gs724tppMatch-

Node

netgear gs724tpv2_firmwareRange<2.0.6.3

AND

netgear gs724tpv2Match-

Node

netgear gs728tppv2_firmwareRange<6.0.8.2

AND

netgear gs728tppv2Match-

Node

netgear gs728tpv2_firmwareRange<6.0.8.2

AND

netgear gs728tpv2Match-

Node

netgear gs752tpp_firmwareRange<6.0.8.2

AND

netgear gs752tppMatch-

Node

netgear gs752tpv2_firmwareRange<6.0.8.2

AND

netgear gs752tpv2Match-

Node

netgear ms510txm_firmwareRange<1.0.4.2

AND

netgear ms510txmMatch-

Node

netgear ms510txup_firmwareRange<1.0.4.2

AND

netgear ms510txupMatch-

Source	Link
kb	www.kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175

21 Nov 2024 06:32Current

8.8High risk

Vulners AI Score8.8

CVSS 26.5

CVSS 3.17.5 - 8.8

EPSS0.00791

cve netgear command injection security vulnerability nvd gs108tv2 gs110tpp gs110tpv2 gs110tpv3 gs308t gs310tp gs724tpp gs724tpv2 gs728tppv2 gs728tpv2 gs752tpp gs752tpv2 ms510txm ms510txup