CVE-2021-45555: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, and R8000P before 1.4.2.84.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear R7900p Firmware | <1.4.2.84 | |
| Netgear R7900p | ||
| Netgear R7960p Firmware | <1.4.2.84 | |
| Netgear R7960p | ||
| Netgear R8000p Firmware | <1.4.2.84 | |
| Netgear R8000p |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-45555.
Which devices are affected by this vulnerability?
This vulnerability affects NETGEAR devices R7900P, R7960P, and R8000P with firmware versions before 1.4.2.84.
How severe is CVE-2021-45555?
The severity rating for CVE-2021-45555 is high, with a CVSS score of 6.8.
What is the impact of this vulnerability?
An authenticated user can perform command injection, potentially allowing them to execute arbitrary commands on the affected devices.
How can I fix the vulnerability?
To fix the vulnerability, update the firmware of the affected devices to version 1.4.2.84 or above.