CVE Feed

    Dashboard / CVE / CVE-2021-45602

    CVE-2021-45602

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130, XR500 before 2.3.2.130, and XR700 before 1.0.1.46.

    Published:Dec 26, 2021
    Last Modified:Nov 21, 2024
    EPS:Dec 26, 2021
    EPSS Score:0.00155
    CVSS Score:6.1

    Affected Products

    Vendor
    Netgear
    Product
    D7800
    Vendor
    Netgear
    Product
    D7800 Firmware
    Vendor
    Netgear
    Product
    Ex2700
    Vendor
    Netgear
    Product
    Ex2700 Firmware
    Vendor
    Netgear
    Product
    Lbr1020
    Vendor
    Netgear
    Product
    Lbr1020 Firmware
    Vendor
    Netgear
    Product
    Lbr20
    Vendor
    Netgear
    Product
    Lbr20 Firmware
    Vendor
    Netgear
    Product
    R6700ax
    Vendor
    Netgear
    Product
    R6700ax Firmware
    Vendor
    Netgear
    Product
    R7800
    Vendor
    Netgear
    Product
    R7800 Firmware
    Vendor
    Netgear
    Product
    R8900
    Vendor
    Netgear
    Product
    R8900 Firmware
    Vendor
    Netgear
    Product
    R9000
    Vendor
    Netgear
    Product
    R9000 Firmware
    Vendor
    Netgear
    Product
    Rax10
    Vendor
    Netgear
    Product
    Rax10 Firmware
    Vendor
    Netgear
    Product
    Rax120v1
    Vendor
    Netgear
    Product
    Rax120v1 Firmware
    Vendor
    Netgear
    Product
    Rax120v2
    Vendor
    Netgear
    Product
    Rax120v2 Firmware
    Vendor
    Netgear
    Product
    Rax70
    Vendor
    Netgear
    Product
    Rax70 Firmware
    Vendor
    Netgear
    Product
    Rax78
    Vendor
    Netgear
    Product
    Rax78 Firmware
    Vendor
    Netgear
    Product
    Wn3000rpv2
    Vendor
    Netgear
    Product
    Wn3000rpv2 Firmware
    Vendor
    Netgear
    Product
    Wn3000rpv3
    Vendor
    Netgear
    Product
    Wn3000rpv3 Firmware
    Vendor
    Netgear
    Product
    Xr450
    Vendor
    Netgear
    Product
    Xr450 Firmware
    Vendor
    Netgear
    Product
    Xr500
    Vendor
    Netgear
    Product
    Xr500 Firmware
    Vendor
    Netgear
    Product
    Xr700
    Vendor
    Netgear
    Product
    Xr700 Firmware

    Exploits

    No exploit reference

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-45602 — Netgear (Medium 6.1) | CVE-DB