CVE-2021-45597: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Cbr40 Firmware | <2.5.0.24 | |
| Netgear Cbr40 | ||
| Netgear Cbr750 Firmware | <4.6.3.6 | |
| Netgear Cbr750 | ||
| Netgear Rbr850 Firmware | <3.2.17.12 | |
| NETGEAR RBR850 | ||
| Netgear Rbs850 Firmware | <3.2.17.12 | |
| Netgear Rbs850 | ||
| Netgear Rbk852 Firmware | <3.2.17.12 | |
| Netgear Rbk852 | ||
| All of | ||
| Netgear Cbr40 Firmware | <2.5.0.24 | |
| Netgear Cbr40 | ||
| All of | ||
| Netgear Cbr750 Firmware | <4.6.3.6 | |
| Netgear Cbr750 | ||
| All of | ||
| Netgear Rbr850 Firmware | <3.2.17.12 | |
| NETGEAR RBR850 | ||
| All of | ||
| Netgear Rbs850 Firmware | <3.2.17.12 | |
| Netgear Rbs850 | ||
| All of | ||
| Netgear Rbk852 Firmware | <3.2.17.12 | |
| Netgear Rbk852 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-45597?
CVE-2021-45597 is a vulnerability that affects certain NETGEAR devices, allowing authenticated users to execute arbitrary commands.
Which NETGEAR devices are affected by CVE-2021-45597?
CVE-2021-45597 affects NETGEAR CBR40, CBR750, RBR850, RBS850, and RBK852 devices.
What is the severity of CVE-2021-45597?
CVE-2021-45597 has a high severity rating with a CVSS score of 8.8.
How can an authenticated user exploit CVE-2021-45597?
An authenticated user can exploit CVE-2021-45597 by injecting and executing arbitrary commands.
How can I fix CVE-2021-45597?
To fix CVE-2021-45597, update the firmware of the affected NETGEAR devices to the recommended versions provided by NETGEAR.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/netgear
- canonical/netgear cbr40 firmware
- canonical/netgear cbr40
- canonical/netgear cbr750 firmware
- canonical/netgear cbr750
- canonical/netgear rbr850 firmware
- canonical/netgear rbr850
- canonical/netgear rbs850 firmware
- canonical/netgear rbs850
- canonical/netgear rbk852 firmware
- canonical/netgear rbk852