CVE-2021-45593: Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.2.102, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBR50 before 2.7.2.102, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.2.102.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-45593?
CVE-2021-45593 is a vulnerability that allows an authenticated user to execute arbitrary commands on certain NETGEAR devices.
Which NETGEAR devices are affected by CVE-2021-45593?
CVE-2021-45593 affects the following NETGEAR devices: RBR20, RBR40, RBR50, RBS20, RBS40, RBK20, RBK40, and RBK50.
What is the severity of CVE-2021-45593?
CVE-2021-45593 has a severity rating of 6.8 (high).
How can I fix CVE-2021-45593?
To fix CVE-2021-45593, update the affected NETGEAR devices to the latest firmware versions: RBR20 2.7.3.22, RBR40 2.7.3.22, RBR50 2.7.2.102, RBS20 2.7.3.22, RBS40 2.7.3.22, RBK20 2.7.3.22, RBK40 2.7.3.22, and RBK50 2.7.2.102.
Where can I find more information about CVE-2021-45593?
You can find more information about CVE-2021-45593 in the NETGEAR Security Advisory: https://kb.netgear.com/000064474/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0175.