Lucene search

[email protected]CVE-2021-45556

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45556

2021-12-2601:15:00

CWE-77

[email protected]

web.nvd.nist.gov

cve

netgear

command injection

security vulnerability

nvd

gs108tv2

gs110tpp

gs110tpv2

gs110tpv3

gs308t

gs310tp

gs724tpp

gs724tpv2

gs728tppv2

gs728tpv2

gs752tpp

gs752tpv2

ms510txm

ms510txup

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.8%

JSON

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

CPENameOperatorVersion
netgear:gs108tv2_firmwarenetgear gs108tv2 firmwarelt5.4.2.36
netgear:gs110tpp_firmwarenetgear gs110tpp firmwarelt7.0.7.2
netgear:gs110tpv2_firmwarenetgear gs110tpv2 firmwarelt5.4.2.36
netgear:gs308t_firmwarenetgear gs308t firmwarelt1.0.3.2
netgear:gs110tpv3_firmwarenetgear gs110tpv3 firmwarelt7.0.7.2
netgear:gs310tp_firmwarenetgear gs310tp firmwarelt1.0.3.2
netgear:gs724tpp_firmwarenetgear gs724tpp firmwarelt2.0.6.3
netgear:gs724tpv2_firmwarenetgear gs724tpv2 firmwarelt2.0.6.3
netgear:gs728tppv2_firmwarenetgear gs728tppv2 firmwarelt6.0.8.2
netgear:gs728tpv2_firmwarenetgear gs728tpv2 firmwarelt6.0.8.2

CPE	Name	Operator	Version
netgear:gs108tv2_firmware	netgear gs108tv2 firmware	lt	5.4.2.36
netgear:gs110tpp_firmware	netgear gs110tpp firmware	lt	7.0.7.2
netgear:gs110tpv2_firmware	netgear gs110tpv2 firmware	lt	5.4.2.36
netgear:gs308t_firmware	netgear gs308t firmware	lt	1.0.3.2
netgear:gs110tpv3_firmware	netgear gs110tpv3 firmware	lt	7.0.7.2
netgear:gs310tp_firmware	netgear gs310tp firmware	lt	1.0.3.2
netgear:gs724tpp_firmware	netgear gs724tpp firmware	lt	2.0.6.3
netgear:gs724tpv2_firmware	netgear gs724tpv2 firmware	lt	2.0.6.3
netgear:gs728tppv2_firmware	netgear gs728tppv2 firmware	lt	6.0.8.2
netgear:gs728tpv2_firmware	netgear gs728tpv2 firmware	lt	6.0.8.2

Rows per page:

1-10 of 141

References

kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.8%

JSON

Related for CVE-2021-45556

prion1