CVE-2021-45534: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, D7000 before 1.0.1.82, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.2.0.88, R6800 before 1.2.0.88, R6850 before 1.1.0.84, R6900v2 before 1.2.0.88, R7200 before 1.2.0.88, R7350 before 1.2.0.88, R7400 before 1.2.0.88, and R7450 before 1.2.0.88.
Affected Software
Remediation
Event History
Frequently Asked Questions
Which NETGEAR devices are affected by command injection?
AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, D7000 before 1.0.1.82, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 before 1.1.0.84, R6700v2 before 1.2.0.88, R6800 before 1.2.0.88, R6850 before 1.1.0.84, R6900v2 before 1.2.0.88, R7200 before 1.2.0.88, R7350 before 1.2.0.88, R7400 before 1.2.0.88, R7450 before 1.2.0.88.
What is the severity of CVE-2021-45534?
The severity of CVE-2021-45534 is high with a CVSS score of 7.8.
How can an authenticated user exploit CVE-2021-45534?
An authenticated user can exploit CVE-2021-45534 by injecting arbitrary commands and executing them with elevated privileges.
Is there a fix available for CVE-2021-45534?
Yes, a fix is available for CVE-2021-45534. Users should update their affected devices to the latest firmware version.
Where can I find more information about CVE-2021-45534?
You can find more information about CVE-2021-45534 in the following resources: [link1](https://immersivelabs.com/resources/blog/netgear-vulnerabilities-could-put-small-business-routers-at-risk/), [link2](https://kb.netgear.com/000064406/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-DSL-Modem-Routers-PSV-2021-0172).