CVE-2021-45597: Command Injection
Published Dec 26, 2021
·Updated
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Affected Software
20 affected components
All of the following
Netgear Cbr40 Firmware<2.5.0.24
Netgear CBR40
All of the following
Netgear Cbr750 Firmware<4.6.3.6
Netgear CBR750
All of the following
Netgear Rbr850 Firmware<3.2.17.12
Netgear RBR850
All of the following
Netgear Rbs850 Firmware<3.2.17.12
Netgear RBS850
All of the following
Netgear Rbk852 Firmware<3.2.17.12
Netgear RBK852
Netgear Cbr40 Firmware<2.5.0.24
Netgear CBR40
Netgear Cbr750 Firmware<4.6.3.6
Netgear CBR750
Netgear Rbr850 Firmware<3.2.17.12
Netgear RBR850
Netgear Rbs850 Firmware<3.2.17.12
Netgear RBS850
Netgear Rbk852 Firmware<3.2.17.12
Netgear RBK852
Event History
Dec 26, 2021
CVE Published
via MITRE·12:39 AM
Data Sourced
via MITRE·12:39 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-45597?
CVE-2021-45597 is a vulnerability that affects certain NETGEAR devices, allowing authenticated users to execute arbitrary commands.
2
Which NETGEAR devices are affected by CVE-2021-45597?
CVE-2021-45597 affects NETGEAR CBR40, CBR750, RBR850, RBS850, and RBK852 devices.
3
What is the severity of CVE-2021-45597?
CVE-2021-45597 has a high severity rating with a CVSS score of 8.8.
4
How can an authenticated user exploit CVE-2021-45597?
An authenticated user can exploit CVE-2021-45597 by injecting and executing arbitrary commands.
5
How can I fix CVE-2021-45597?
To fix CVE-2021-45597, update the firmware of the affected NETGEAR devices to the recommended versions provided by NETGEAR.