CVE-2021-45554: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R6400 Firmware | <1.0.1.74 | |
| NETGEAR R6400 | ||
| Netgear R6400v2 Firmware | <1.0.4.118 | |
| NETGEAR R6400v2 | ||
| Netgear R6700v3 Firmware | <1.0.4.118 | |
| NETGEAR R6700v3 | ||
| Netgear R7000 Firmware | <1.0.11.126 | |
| NETGEAR R7000 | ||
| Netgear R6900p Firmware | <1.3.3.140 | |
| Netgear R6900P | ||
| Netgear R7000p Firmware | <1.3.3.140 | |
| Netgear R7000P | ||
| Netgear R8000 Firmware | <1.0.4.74 | |
| NETGEAR R8000 | ||
| All of | ||
| Netgear R6400 Firmware | <1.0.1.74 | |
| NETGEAR R6400 | ||
| All of | ||
| Netgear R6400v2 Firmware | <1.0.4.118 | |
| NETGEAR R6400v2 | ||
| All of | ||
| Netgear R6700v3 Firmware | <1.0.4.118 | |
| NETGEAR R6700v3 | ||
| All of | ||
| Netgear R7000 Firmware | <1.0.11.126 | |
| NETGEAR R7000 | ||
| All of | ||
| Netgear R6900p Firmware | <1.3.3.140 | |
| Netgear R6900P | ||
| All of | ||
| Netgear R7000p Firmware | <1.3.3.140 | |
| Netgear R7000P | ||
| All of | ||
| Netgear R8000 Firmware | <1.0.4.74 | |
| NETGEAR R8000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
Which NETGEAR devices are affected by the command injection vulnerability?
The vulnerability affects the following NETGEAR devices: R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74.
How severe is CVE-2021-45554?
The severity of CVE-2021-45554 is high with a CVSS score of 6.8.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2021-45554 is CWE-77.
How can I fix the command injection vulnerability in my NETGEAR device?
To fix the vulnerability, you should update your NETGEAR device firmware to the latest version provided by the manufacturer.
Where can I find more information about CVE-2021-45554?
You can find more information about CVE-2021-45554 in the Netgear security advisory at the following link: https://kb.netgear.com/000064119/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0187
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/netgear
- canonical/netgear r6400 firmware
- canonical/netgear r6400
- canonical/netgear r6400v2 firmware
- canonical/netgear r6400v2
- canonical/netgear r6700v3 firmware
- canonical/netgear r6700v3
- canonical/netgear r7000 firmware
- canonical/netgear r7000
- canonical/netgear r6900p firmware
- canonical/netgear r6900p
- canonical/netgear r7000p firmware
- canonical/netgear r7000p
- canonical/netgear r8000 firmware
- canonical/netgear r8000