CVE-2021-45541: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900 before 1.0.4.38, R7900P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| NETGEAR RAX200 firmware | <1.0.3.106 | |
| NETGEAR RAX200 firmware | ||
| All of | ||
| NETGEAR MR60 Firmware | <1.0.6.110 | |
| NETGEAR MR60 firmware | ||
| All of | ||
| NETGEAR RAX45 firmware | <1.0.2.72 | |
| NETGEAR RAX45 firmware | ||
| All of | ||
| NETGEAR RAX80 Firmware | <1.0.3.106 | |
| NETGEAR RAX80 firmware | ||
| All of | ||
| NETGEAR MS60 | <1.0.6.110 | |
| NETGEAR MS60 firmware | ||
| All of | ||
| NETGEAR RAX50 | <1.0.2.72 | |
| NETGEAR RAX50 | ||
| All of | ||
| NETGEAR RAX75 firmware | <1.0.3.106 | |
| NETGEAR RAX75 firmware | ||
| All of | ||
| NETGEAR RBR750 | <3.2.16.6 | |
| NETGEAR RBR750 firmware | ||
| All of | ||
| NETGEAR RBR850 firmware | <3.2.16.6 | |
| NETGEAR RBR850 firmware | ||
| All of | ||
| NETGEAR RBS750 | <3.2.16.6 | |
| NETGEAR RBS750 | ||
| All of | ||
| NETGEAR RBS850 Firmware | <3.2.16.6 | |
| NETGEAR RBS850 Firmware | ||
| All of | ||
| NETGEAR RBK752 firmware | <3.2.16.6 | |
| NETGEAR RBK752 firmware | ||
| All of | ||
| NETGEAR RBK852 | <3.2.16.6 | |
| NETGEAR Orbi RBK852 | ||
| All of | ||
| NETGEAR R7900P firmware | <1.0.4.38 | |
| NETGEAR R7900P firmware | ||
| All of | ||
| NETGEAR R8000 firmware | <1.0.4.68 | |
| NETGEAR R8000 firmware | ||
| All of | ||
| NETGEAR R7900P firmware | <1.4.2.84 | |
| NETGEAR R7900P firmware | ||
| All of | ||
| NETGEAR R8000P | <1.4.2.84 | |
| NETGEAR R8000P firmware | ||
| NETGEAR RAX200 firmware | <1.0.3.106 | |
| NETGEAR RAX200 firmware | ||
| NETGEAR MR60 Firmware | <1.0.6.110 | |
| NETGEAR MR60 firmware | ||
| NETGEAR RAX45 firmware | <1.0.2.72 | |
| NETGEAR RAX45 firmware | ||
| NETGEAR RAX80 Firmware | <1.0.3.106 | |
| NETGEAR RAX80 firmware | ||
| NETGEAR MS60 | <1.0.6.110 | |
| NETGEAR MS60 firmware | ||
| NETGEAR RAX50 | <1.0.2.72 | |
| NETGEAR RAX50 | ||
| NETGEAR RAX75 firmware | <1.0.3.106 | |
| NETGEAR RAX75 firmware | ||
| NETGEAR RBR750 | <3.2.16.6 | |
| NETGEAR RBR750 firmware | ||
| NETGEAR RBR850 firmware | <3.2.16.6 | |
| NETGEAR RBR850 firmware | ||
| NETGEAR RBS750 | <3.2.16.6 | |
| NETGEAR RBS750 | ||
| NETGEAR RBS850 Firmware | <3.2.16.6 | |
| NETGEAR RBS850 Firmware | ||
| NETGEAR RBK752 firmware | <3.2.16.6 | |
| NETGEAR RBK752 firmware | ||
| NETGEAR RBK852 | <3.2.16.6 | |
| NETGEAR Orbi RBK852 | ||
| NETGEAR R7900P firmware | <1.0.4.38 | |
| NETGEAR R7900P firmware | ||
| NETGEAR R8000 firmware | <1.0.4.68 | |
| NETGEAR R8000 firmware | ||
| NETGEAR R7900P firmware | <1.4.2.84 | |
| NETGEAR R7900P firmware | ||
| NETGEAR R8000P | <1.4.2.84 | |
| NETGEAR R8000P firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-45541?
CVE-2021-45541 is a vulnerability that allows command injection by an authenticated user on certain NETGEAR devices.
Which NETGEAR devices are affected by CVE-2021-45541?
NETGEAR devices such as R7900, R7900P, R8000, R8000P, RAX200, MR60, RAX45, RAX80, MS60, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 are affected by CVE-2021-45541.
What is the severity of CVE-2021-45541?
The severity of CVE-2021-45541 is rated as high, with a severity value of 8.8 (out of 10).
How can I fix CVE-2021-45541?
To fix CVE-2021-45541, it is recommended to update the firmware of the affected NETGEAR devices to the latest version provided by NETGEAR.
Where can I find more information about CVE-2021-45541?
More information about CVE-2021-45541 can be found in the security advisory published by NETGEAR at the following link: https://kb.netgear.com/000064479/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0246
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/netgear
- canonical/netgear rax200 firmware
- canonical/netgear mr60 firmware
- canonical/netgear rax45 firmware
- canonical/netgear rax80 firmware
- canonical/netgear ms60
- canonical/netgear ms60 firmware
- canonical/netgear rax50
- canonical/netgear rax75 firmware
- canonical/netgear rbr750
- canonical/netgear rbr750 firmware
- canonical/netgear rbr850 firmware
- canonical/netgear rbs750
- canonical/netgear rbs850 firmware
- canonical/netgear rbk752 firmware
- canonical/netgear rbk852
- canonical/netgear orbi rbk852
- canonical/netgear r7900p firmware
- canonical/netgear r8000 firmware
- canonical/netgear r8000p
- canonical/netgear r8000p firmware