CVE-2021-45554: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74.
Affected Software
Remediation
Event History
Frequently Asked Questions
Which NETGEAR devices are affected by the command injection vulnerability?
The vulnerability affects the following NETGEAR devices: R6400 before 1.0.1.74, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R7000 before 1.0.11.126, R6900P before 1.3.3.140, R7000P before 1.3.3.140, and R8000 before 1.0.4.74.
How severe is CVE-2021-45554?
The severity of CVE-2021-45554 is high with a CVSS score of 6.8.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2021-45554 is CWE-77.
How can I fix the command injection vulnerability in my NETGEAR device?
To fix the vulnerability, you should update your NETGEAR device firmware to the latest version provided by the manufacturer.
Where can I find more information about CVE-2021-45554?
You can find more information about CVE-2021-45554 in the Netgear security advisory at the following link: https://kb.netgear.com/000064119/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0187