CVE-2021-45602

🗓️ 26 Dec 2021 01:15:17Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 22 Views

Certain NETGEAR devices affected by command injectio

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2021-45602	26 Dec 202101:15	–	attackerkb
BDU FSTEC	Vulnerabilities of the built-in software on NETGEAR Wi-Fi routers such as R6700AX, R7800, R8900, R9000, RAX10, RAX120v1, RAX120v2, RAX70, RAX78, XR450, XR500, XR700, and the low-cost LTE modem LBR1020; vulnerabilities of the wireless signal amplifiers EX2700, WN3000RPv2, WN3000RPv3; and vulnerabilities of the Orbi Wi-Fi system LBR20—all related to the lack of measures to protect input data. These vulnerabilities allow attackers to execute arbitrary commands or gain unauthorized access to protected information.	26 Jan 202200:00	–	bdu_fstec
CNNVD	NETGEAR 操作系统命令注入漏洞	26 Dec 202100:00	–	cnnvd
CVE	CVE-2021-45602	26 Dec 202100:38	–	cve
Cvelist	CVE-2021-45602	26 Dec 202100:38	–	cvelist
EUVD	EUVD-2021-32368	3 Oct 202520:07	–	euvd
OSV	CVE-2021-45602	26 Dec 202101:15	–	osv
Prion	Command injection	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45602	22 May 202521:09	–	redhatcve

NVD

Node

netgear d7800_firmwareRange<1.0.1.66

AND

netgear d7800Match-

Node

netgear ex2700_firmwareRange<1.0.1.68

AND

netgear ex2700Match-

Node

netgear wn3000rpv2_firmwareRange<1.0.0.90

AND

netgear wn3000rpv2Match-

Node

netgear wn3000rpv3_firmwareRange<1.0.2.100

AND

netgear wn3000rpv3Match-

Node

netgear lbr1020_firmwareRange<2.6.5.20

AND

netgear lbr1020Match-

Node

netgear lbr20_firmwareRange<2.6.5.32

AND

netgear lbr20Match-

Node

netgear r6700ax_firmwareRange<1.0.10.110

AND

netgear r6700axMatch-

Node

netgear r7800_firmwareRange<1.0.2.86

AND

netgear r7800Match-

Node

netgear r8900_firmwareRange<1.0.5.38

AND

netgear r8900Match-

Node

netgear r9000_firmwareRange<1.0.5.38

AND

netgear r9000Match-

Node

netgear rax10_firmwareRange<1.0.10.110

AND

netgear rax10Match-

Node

netgear rax120v1_firmwareRange<1.2.3.28

AND

netgear rax120v1Match-

Node

netgear rax120v2_firmwareRange<1.2.3.28

AND

netgear rax120v2Match-

Node

netgear rax70_firmwareRange<1.0.10.110

AND

netgear rax70Match-

Node

netgear rax78_firmwareRange<1.0.10.110

AND

netgear rax78Match-

Node

netgear xr450_firmwareRange<2.3.2.130

AND

netgear xr450Match-

Node

netgear xr500_firmwareRange<2.3.2.130

AND

netgear xr500Match-

Node

netgear xr700_firmwareRange<1.0.1.46

AND

netgear xr700Match-

Source	Link
immersivelabs	www.immersivelabs.com/resources/blog/netgear-vulnerabilities-could-put-small-business-routers-at-risk/
kb	www.kb.netgear.com/000064407/Security-Advisory-for-Post-Authentication-Command-Injection-Sensitive-Information-Disclosure-on-Multiple-Products-PSV-2021-0169-PSV-2021-0171

17 Jun 2026 04:13Current

CVSS 24.6

CVSS 3.16.1 - 7.8

EPSS0.00702

netgear command injection d7800 ex2700 wn3000rpv2 wn3000rpv3 lbr1020 lbr20 r6700ax r7800 r8900 r9000 rax10 rax120v1 rax120v2 rax70 rax78 xr450 xr500 xr700