CVE-2021-45602: OS Command Injection
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130, XR500 before 2.3.2.130, and XR700 before 1.0.1.46.
Affected Software
Remediation
Event History
Frequently Asked Questions
How does CVE-2021-45602 affect certain NETGEAR devices?
Certain NETGEAR devices are affected by command injection by an authenticated user.
Which NETGEAR devices are affected by CVE-2021-45602?
The affected NETGEAR devices include D7800, EX2700, WN3000RPv2, WN3000RPv3, LBR1020, LBR20, R6700AX, R7800, R8900, R9000, Rax10, Rax120v1, Rax120v2, Rax70, Rax78, XR450, XR500, and XR700 models.
What is the severity level of CVE-2021-45602?
The severity level of CVE-2021-45602 is high, with a CVSS score of 7.8.
How can I fix the vulnerability in my NETGEAR device?
Update your NETGEAR device firmware to the latest version provided by NETGEAR.
Where can I find more information about CVE-2021-45602?
You can find more information about CVE-2021-45602 in the references provided: [Reference 1](https://immersivelabs.com/resources/blog/netgear-vulnerabilities-could-put-small-business-routers-at-risk/) and [Reference 2](https://kb.netgear.com/000064407/Security-Advisory-for-Post-Authentication-Command-Injection-Sensitive-Information-Disclosure-on-Multiple-Products-PSV-2021-0169-PSV-2021-0171).