CVE-2021-29071

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBR752 before 3.2.17.12, RBR753 before 3.2.17.12, RBR753S before 3.2.17.12, RBR754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:rbr752_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr752:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:rbr753_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr753:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:rbr753s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr753s:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:rbr754_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr754:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:00

Type Values Removed Values Added
References () https://kb.netgear.com/000063008/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0476 - Vendor Advisory () https://kb.netgear.com/000063008/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0476 - Vendor Advisory
CVSS v2 : 5.2
v3 : 9.0
v2 : 5.2
v3 : 9.6

Information

Published : 2021-03-23 07:15

Updated : 2024-11-21 06:00


NVD link : CVE-2021-29071

Mitre link : CVE-2021-29071

CVE.ORG link : CVE-2021-29071


JSON object : View

Products Affected

netgear

  • rbs850_firmware
  • rbr752_firmware
  • rbr754_firmware
  • rbr750
  • rbk852
  • rbk854
  • rbr850
  • rbs850
  • rbr753s
  • rbr753s_firmware
  • rbs750_firmware
  • rbr750_firmware
  • rbk854_firmware
  • rbk853
  • rbs750
  • rbk852_firmware
  • rbr754
  • rbr753
  • rbk853_firmware
  • rbr850_firmware
  • rbr753_firmware
  • rbr752
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')