Lucene search

[email protected]CVE-2021-45556

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45556

2021-12-2601:15:15

CWE-77

[email protected]

web.nvd.nist.gov

cve

netgear

command injection

security vulnerability

nvd

gs108tv2

gs110tpp

gs110tpv2

gs110tpv3

gs308t

gs310tp

gs724tpp

gs724tpv2

gs728tppv2

gs728tpv2

gs752tpp

gs752tpv2

ms510txm

ms510txup

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

Affected configurations

NVD

Node

netgeargs108tv2_firmwareRange<5.4.2.36

AND

netgeargs108tv2Match-

Node

netgeargs110tpp_firmwareRange<7.0.7.2

AND

netgeargs110tppMatch-

Node

netgeargs110tpv2_firmwareRange<5.4.2.36

AND

netgeargs110tpv2Match-

Node

netgeargs308t_firmwareRange<1.0.3.2

AND

netgeargs308tMatch-

Node

netgeargs110tpv3_firmwareRange<7.0.7.2

AND

netgeargs110tpv3Match-

Node

netgeargs310tp_firmwareRange<1.0.3.2

AND

netgeargs310tpMatch-

Node

netgeargs724tpp_firmwareRange<2.0.6.3

AND

netgeargs724tppMatch-

Node

netgeargs724tpv2_firmwareRange<2.0.6.3

AND

netgeargs724tpv2Match-

Node

netgeargs728tppv2_firmwareRange<6.0.8.2

AND

netgeargs728tppv2Match-

Node

netgeargs728tpv2_firmwareRange<6.0.8.2

AND

netgeargs728tpv2Match-

Node

netgeargs752tpp_firmwareRange<6.0.8.2

AND

netgeargs752tppMatch-

Node

netgeargs752tpv2_firmwareRange<6.0.8.2

AND

netgeargs752tpv2Match-

Node

netgearms510txm_firmwareRange<1.0.4.2

AND

netgearms510txmMatch-

Node

netgearms510txup_firmwareRange<1.0.4.2

AND

netgearms510txupMatch-

CPENameOperatorVersion
netgear:gs108tv2_firmwarenetgear gs108tv2 firmwarelt5.4.2.36

CPE	Name	Operator	Version
netgear:gs108tv2_firmware	netgear gs108tv2 firmware	lt	5.4.2.36

References

kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

Related for CVE-2021-45556

nvd1 prion1 cvelist1