CVE-2021-29076: Command Injection
First published: Tue Mar 23 2021(Updated: )
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Rbk852 Firmware | <3.2.17.12 | |
| Netgear Rbk852 | ||
| Netgear Rbk853 Firmware | <3.2.17.12 | |
| Netgear Rbk853 | ||
| Netgear Rbk854 Firmware | <3.2.17.12 | |
| Netgear Rbk854 | ||
| Netgear Rbr850 Firmware | <3.2.17.12 | |
| NETGEAR RBR850 | ||
| Netgear Rbs850 Firmware | <3.2.17.12 | |
| Netgear Rbs850 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-29076?
CVE-2021-29076 is a vulnerability that affects certain NETGEAR devices, allowing an unauthenticated attacker to perform command injection.
Which devices are affected by CVE-2021-29076?
RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12 are affected by CVE-2021-29076.
What is the severity of CVE-2021-29076?
CVE-2021-29076 has a severity rating of 9.6 (Critical).
How can an unauthenticated attacker exploit CVE-2021-29076?
An unauthenticated attacker can exploit CVE-2021-29076 by performing command injection.
Is there a fix available for CVE-2021-29076?
Yes, the fix for CVE-2021-29076 is to upgrade RBK852, RBK853, RBK854, RBR850, and RBS850 to version 3.2.17.12 or later.
- collector/nvd-index
- vendor/netgear
- canonical/netgear rbk852 firmware
- canonical/netgear rbk852
- canonical/netgear rbk853 firmware
- canonical/netgear rbk853
- canonical/netgear rbk854 firmware
- canonical/netgear rbk854
- canonical/netgear rbr850 firmware
- canonical/netgear rbr850
- canonical/netgear rbs850 firmware
- canonical/netgear rbs850