CVE-2021-45624: Command Injection
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72, R7900 before 1.0.4.30, R8000 before 1.0.4.62, XR300 before 1.0.3.56, R7000P before 1.3.2.132, R8500 before 1.0.2.144, R6900P before 1.3.2.132, and R8300 before 1.0.2.144.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-45624?
CVE-2021-45624 is a vulnerability that affects certain NETGEAR devices and allows an unauthenticated attacker to perform command injection.
Which NETGEAR devices are affected by CVE-2021-45624?
CVE-2021-45624 affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72, R7900 before 1.0.4.30, R8000 before 1.0.4.62, XR300 before 1.0.3.56, R7000P before 1.3.2.132, R8500 before 1.0.2.144, R6900P before 1.3.2.132, and R8300 before 1.0.2.144.
What is the severity of CVE-2021-45624?
CVE-2021-45624 has a severity rating of 9.8 (Critical).
How does CVE-2021-45624 work?
CVE-2021-45624 allows an unauthenticated attacker to inject and execute arbitrary commands on certain NETGEAR devices.
How can I protect my NETGEAR device from CVE-2021-45624?
To protect your NETGEAR device from CVE-2021-45624, make sure to update to the latest firmware version provided by NETGEAR.