CVE-2021-41383

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2021-09-17

Last modified

2024-08-04

Weaknesses

CWE-77

Affected products

• R6020 Firmware (Netgear)

References

• https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html