CVE-2021-38518: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Affected Software
Event History
Frequently Asked Questions
Which NETGEAR devices are affected by CVE-2021-38518?
RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
What is the severity rating of CVE-2021-38518?
The severity rating of CVE-2021-38518 is 7.2 (high).
How can I fix the vulnerability CVE-2021-38518 on my NETGEAR device?
You can fix the vulnerability CVE-2021-38518 by updating your device's firmware to version 1.0.4.120 for RAX200, RAX75, and RAX80, and version 3.2.17.12 for RBK852, RBR850, and RBS850.
Is the NETGEAR RAX200 device vulnerable to CVE-2021-38518?
Yes, the NETGEAR RAX200 device is vulnerable to CVE-2021-38518 if it is running firmware version before 1.0.4.120.
Where can I find more information about CVE-2021-38518?
You can find more information about CVE-2021-38518 in the Netgear security advisory at https://kb.netgear.com/000063783/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0528.