CVE-2021-45599: Command Injection
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Cbr40 Firmware | <2.5.0.24 | |
| Netgear Cbr40 | ||
| Netgear Cbr750 Firmware | <4.6.3.6 | |
| Netgear Cbr750 | ||
| Netgear Rbr850 Firmware | <3.2.17.12 | |
| NETGEAR RBR850 | ||
| Netgear Rbs850 Firmware | <3.2.17.12 | |
| Netgear Rbs850 | ||
| Netgear Rbk852 Firmware | <3.2.17.12 | |
| Netgear Rbk852 | ||
| All of | ||
| Netgear Cbr40 Firmware | <2.5.0.24 | |
| Netgear Cbr40 | ||
| All of | ||
| Netgear Cbr750 Firmware | <4.6.3.6 | |
| Netgear Cbr750 | ||
| All of | ||
| Netgear Rbr850 Firmware | <3.2.17.12 | |
| NETGEAR RBR850 | ||
| All of | ||
| Netgear Rbs850 Firmware | <3.2.17.12 | |
| Netgear Rbs850 | ||
| All of | ||
| Netgear Rbk852 Firmware | <3.2.17.12 | |
| Netgear Rbk852 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-45599?
CVE-2021-45599 refers to a command injection vulnerability that affects certain NETGEAR devices.
Which devices are affected by CVE-2021-45599?
CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12 are affected by CVE-2021-45599.
What is the severity of CVE-2021-45599?
The severity of CVE-2021-45599 is high with a CVSS score of 8.8.
How can I fix the CVE-2021-45599 vulnerability?
To fix the CVE-2021-45599 vulnerability, make sure to update the firmware of the affected NETGEAR devices to the latest version provided by the vendor.
Where can I find more information about CVE-2021-45599?
You can find more information about CVE-2021-45599 on the NETGEAR Security Advisory page provided by the vendor.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/netgear
- canonical/netgear cbr40 firmware
- canonical/netgear cbr40
- canonical/netgear cbr750 firmware
- canonical/netgear cbr750
- canonical/netgear rbr850 firmware
- canonical/netgear rbr850
- canonical/netgear rbs850 firmware
- canonical/netgear rbs850
- canonical/netgear rbk852 firmware
- canonical/netgear rbk852