Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.2.102, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBR50 before 2.7.2.102, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.2.102.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
History
21 Nov 2024, 06:32
Type | Values Removed | Values Added |
---|---|---|
References | () https://kb.netgear.com/000064474/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0175 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : 5.2
v3 : 8.4 |
Information
Published : 2021-12-26 01:15
Updated : 2024-11-21 06:32
NVD link : CVE-2021-45593
Mitre link : CVE-2021-45593
CVE.ORG link : CVE-2021-45593
JSON object : View
Products Affected
netgear
- rbs20
- rbr20_firmware
- rbr20
- rbk50
- rbs40_firmware
- rbr40
- rbk20
- rbr50
- rbk50_firmware
- rbs40
- rbk40
- rbk40_firmware
- rbs20_firmware
- rbk20_firmware
- rbr50_firmware
- rbr40_firmware
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')