CVE-2021-45623

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R7800 before 1.0.2.74, R9000 before 1.0.5.2, and XR500 before 2.3.2.66.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-12-26

Last modified

2024-08-04

Weaknesses

CWE-77

Affected products

• R7800 Firmware (Netgear)
• R9000 Firmware (Netgear)
• Xr500 Firmware (Netgear)

References

• https://kb.netgear.com/000064449/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2019-02…