First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RAX200 before 1.0.4.120, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear Rax200 Firmware | <1.0.4.120 | |
NETGEAR RAX200 | ||
Netgear Rax75 Firmware | <1.0.4.120 | |
Netgear Rax75 | ||
Netgear Rax80 Firmware | <1.0.4.120 | |
Netgear Rax80 | ||
Netgear Rbk852 Firmware | <3.2.17.12 | |
Netgear Rbk852 | ||
Netgear Rbr850 Firmware | <3.2.17.12 | |
NETGEAR RBR850 | ||
Netgear Rbs850 Firmware | <3.2.17.12 | |
Netgear Rbs850 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-45542 is a vulnerability that affects certain NETGEAR devices, allowing an authenticated user to perform command injection.
NETGEAR devices such as RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 are affected by CVE-2021-45542.
CVE-2021-45542 allows an authenticated user to execute arbitrary commands on the affected NETGEAR devices.
CVE-2021-45542 has a severity score of 6.8, which is classified as high.
Yes, NETGEAR has released firmware updates to address the CVE-2021-45542 vulnerability. It is recommended to update the affected devices to the latest firmware version.