CVE-2021-45548

🗓️ 26 Dec 2021 01:15:15Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

NETGEAR devices affected by authenticated user command injectio

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-45548	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerability of the embedded software of NETGEAR routers such as D7800, DM200, EX2700, EX6150v2, EX6200v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, R7500v2, R7800, R8900, R9000, RAX120, WN3000RPv2, WN3000RPv3, WNR2000v5, XR500, RBK20, RBR20, RBS20, RBK40, RBR40, and RBS40 lies in the absence of measures to clean incoming data. This allows a malicious actor to execute arbitrary commands.	4 Mar 202200:00	–	bdu_fstec
CNNVD	Netgear NETGEAR 命令注入漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45548	26 Dec 202100:52	–	cve
Cvelist	CVE-2021-45548	26 Dec 202100:52	–	cvelist
EUVD	EUVD-2021-32314	3 Oct 202520:07	–	euvd
OSV	CVE-2021-45548	26 Dec 202101:15	–	osv
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45548	22 May 202521:10	–	redhatcve

NVD

Node

netgear d7800_firmwareRange<1.0.1.60

AND

netgear d7800Match-

Node

netgear dm200_firmwareRange<1.0.0.66

AND

netgear dm200Match-

Node

netgear ex2700_firmwareRange<1.0.1.56

AND

netgear ex2700Match-

Node

netgear ex6150v2_firmwareRange<1.0.1.86

AND

netgear ex6150v2Match-

Node

netgear ex6200v2_firmwareRange<1.0.1.86

AND

netgear ex6200v2Match-

Node

netgear ex6250_firmwareRange<1.0.0.128

AND

netgear ex6250Match-

Node

netgear ex6400_firmwareRange<1.0.2.144

AND

netgear ex6400Match-

Node

netgear ex6400v2_firmwareRange<1.0.0.128

AND

netgear ex6400v2Match-

Node

netgear ex6410_firmwareRange<1.0.0.128

AND

netgear ex6410Match-

Node

netgear ex6420_firmwareRange<1.0.0.128

AND

netgear ex6420Match-

Node

netgear ex7300_firmwareRange<1.0.2.144

AND

netgear ex7300Match-

Node

netgear ex7300v2_firmwareRange<1.0.0.128

AND

netgear ex7300v2Match-

Node

netgear ex7320_firmwareRange<1.0.0.128

AND

netgear ex7320Match-

Node

netgear r7500v2_firmwareRange<1.0.3.46

AND

netgear r7500v2Match-

Node

netgear r7800_firmwareRange<1.0.2.74

AND

netgear r7800Match-

Node

netgear r8900_firmwareRange<1.0.5.26

AND

netgear r8900Match-

Node

netgear r9000_firmwareRange<1.0.5.2

AND

netgear r9000Match-

Node

netgear rax120_firmwareRange<1.0.1.128

AND

netgear rax120Match-

Node

netgear wn3000rpv2_firmwareRange<1.0.0.78

AND

netgear wn3000rpv2Match-

Node

netgear wn3000rpv3_firmwareRange<1.0.2.80

AND

netgear wn3000rpv3Match-

Node

netgear wnr2000v5_firmwareRange<1.0.0.74

AND

netgear wnr2000v5_firmwareMatch-

Node

netgear xr500_firmwareRange<2.3.2.66

AND

netgear xr500Match-

Node

netgear rbk20_firmwareRange<2.7.3.22

AND

netgear rbk20Match-

Node

netgear rbr20_firmwareRange<2.7.3.22

AND

netgear rbr20Match-

Node

netgear rbs20_firmwareRange<2.7.3.22

AND

netgear rbs20Match-

Node

netgear rbk40_firmwareRange<2.7.3.22

AND

netgear rbk40Match-

Node

netgear rbr40_firmwareRange<2.7.3.22

AND

netgear rbr40Match-

Node

netgear rbs40_firmwareRange<2.7.3.22

AND

netgear rbs40Match-

Source	Link
kb	www.kb.netgear.com/000064450/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2019-0207

21 Nov 2024 06:32Current

CVSS 26.5

CVSS 3.16.3 - 8.8

EPSS0.00954

netgear devices authenticated user command injection