CVE-2021-45555: Command Injection
Published Dec 26, 2021
·Updated
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, and R8000P before 1.4.2.84.
Affected Software
12 affected components
All of the following
Netgear R7900p Firmware<1.4.2.84
Netgear R7900P
All of the following
Netgear R7960p Firmware<1.4.2.84
Netgear R7960P
All of the following
Netgear R8000p Firmware<1.4.2.84
Netgear R8000P
Netgear R7900p Firmware<1.4.2.84
Netgear R7900P
Netgear R7960p Firmware<1.4.2.84
Netgear R7960P
Netgear R8000p Firmware<1.4.2.84
Netgear R8000P
Remediation
Event History
Dec 26, 2021
CVE Published
via MITRE·12:51 AM
Data Sourced
via MITRE·12:51 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-45555.
2
Which devices are affected by this vulnerability?
This vulnerability affects NETGEAR devices R7900P, R7960P, and R8000P with firmware versions before 1.4.2.84.
3
How severe is CVE-2021-45555?
The severity rating for CVE-2021-45555 is high, with a CVSS score of 6.8.
4
What is the impact of this vulnerability?
An authenticated user can perform command injection, potentially allowing them to execute arbitrary commands on the affected devices.
5
How can I fix the vulnerability?
To fix the vulnerability, update the firmware of the affected devices to version 1.4.2.84 or above.