Lucene search

TenableCVELIST:CVE-2021-20167

HistoryDec 30, 2021 - 9:31 p.m.

CVE-2021-20167

2021-12-3021:31:17

tenable

www.cve.org

netgear

rax43

version 1.0.3.96

command injection

vulnerability

readycloud

cgi

application

name parameter

AI Score

8.3

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter.

CNA Affected

[
  {
    "product": "Netgear RAX43",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.3.96"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-55