CVE-2021-38521: Command Injection
Published Aug 11, 2021
·Updated
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX75 before 1.0.1.62, and RAX80 before 1.0.1.62.
Affected Software
20 affected components
Netgear R6400 Firmware<1.0.1.50
Netgear R6400
Netgear R7900p Firmware<1.4.1.50
Netgear R7900P
Netgear R8000p Firmware<1.4.1.50
Netgear R8000P
Netgear Rax75 Firmware<1.0.1.62
Netgear RAX75
Netgear Rax80 Firmware<1.0.1.62
Netgear RAX80
All of the following
Netgear R6400 Firmware<1.0.1.50
Netgear R6400
All of the following
Netgear R7900p Firmware<1.4.1.50
Netgear R7900P
All of the following
Netgear R8000p Firmware<1.4.1.50
Netgear R8000P
All of the following
Netgear Rax75 Firmware<1.0.1.62
Netgear RAX75
All of the following
Netgear Rax80 Firmware<1.0.1.62
Netgear RAX80
Event History
Aug 11, 2021
CVE Published
via MITRE·12:02 AM
Data Sourced
via MITRE·12:02 AM
DescriptionSeverity
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-38521?
CVE-2021-38521 is a vulnerability that allows an authenticated user to execute arbitrary commands on certain NETGEAR devices.
2
Which NETGEAR devices are affected by CVE-2021-38521?
NETGEAR R6400, R7900P, R8000P, RAX75, and RAX80 devices are affected by CVE-2021-38521.
3
What is the severity of CVE-2021-38521?
CVE-2021-38521 has a severity rating of 7.2 (high).
4
How does CVE-2021-38521 work?
CVE-2021-38521 allows an authenticated user to inject and execute arbitrary commands on affected NETGEAR devices.
5
Is there a fix for CVE-2021-38521?
Yes, NETGEAR has released firmware updates that address the CVE-2021-38521 vulnerability. Please refer to the official advisory for more information.