CVE-2021-45593: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.2.102, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBR50 before 2.7.2.102, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.2.102.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Rbr20 Firmware | <2.7.3.22 | |
| Netgear Rbr20 | ||
| Netgear Rbr40 Firmware | <2.7.3.22 | |
| Netgear Rbr40 | ||
| Netgear Rbr50 Firmware | <2.7.2.102 | |
| Netgear Rbr50 | ||
| Netgear Rbs20 Firmware | <2.7.3.22 | |
| Netgear Rbs20 | ||
| Netgear Rbs40 Firmware | <2.7.3.22 | |
| Netgear Rbs40 | ||
| Netgear Rbk20 Firmware | <2.7.3.22 | |
| Netgear Rbk20 | ||
| Netgear Rbk40 Firmware | <2.7.3.22 | |
| Netgear Rbk40 | ||
| Netgear Rbk50 Firmware | <2.7.2.102 | |
| Netgear Rbk50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-45593?
CVE-2021-45593 is a vulnerability that allows an authenticated user to execute arbitrary commands on certain NETGEAR devices.
Which NETGEAR devices are affected by CVE-2021-45593?
CVE-2021-45593 affects the following NETGEAR devices: RBR20, RBR40, RBR50, RBS20, RBS40, RBK20, RBK40, and RBK50.
What is the severity of CVE-2021-45593?
CVE-2021-45593 has a severity rating of 6.8 (high).
How can I fix CVE-2021-45593?
To fix CVE-2021-45593, update the affected NETGEAR devices to the latest firmware versions: RBR20 2.7.3.22, RBR40 2.7.3.22, RBR50 2.7.2.102, RBS20 2.7.3.22, RBS40 2.7.3.22, RBK20 2.7.3.22, RBK40 2.7.3.22, and RBK50 2.7.2.102.
Where can I find more information about CVE-2021-45593?
You can find more information about CVE-2021-45593 in the NETGEAR Security Advisory: https://kb.netgear.com/000064474/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0175.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear rbr20 firmware
- canonical/netgear rbr20
- canonical/netgear rbr40 firmware
- canonical/netgear rbr40
- canonical/netgear rbr50 firmware
- canonical/netgear rbr50
- canonical/netgear rbs20 firmware
- canonical/netgear rbs20
- canonical/netgear rbs40 firmware
- canonical/netgear rbs40
- canonical/netgear rbk20 firmware
- canonical/netgear rbk20
- canonical/netgear rbk40 firmware
- canonical/netgear rbk40
- canonical/netgear rbk50 firmware
- canonical/netgear rbk50