CVE-2021-45625: Command Injection
Published Dec 26, 2021
·Updated
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.
Affected Software
12 affected components
All of the following
Netgear Xr300 Firmware<1.0.3.68
Netgear XR300
All of the following
Netgear R7000p Firmware<1.3.3.140
Netgear R7000P
All of the following
Netgear R6900p Firmware<1.3.3.140
Netgear R6900P
Netgear Xr300 Firmware<1.0.3.68
Netgear XR300
Netgear R7000p Firmware<1.3.3.140
Netgear R7000P
Netgear R6900p Firmware<1.3.3.140
Netgear R6900P
Remediation
Event History
Dec 26, 2021
CVE Published
via MITRE·12:34 AM
Data Sourced
via MITRE·12:34 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-45625?
CVE-2021-45625 is a command injection vulnerability that affects certain NETGEAR devices.
2
Which NETGEAR devices are affected by CVE-2021-45625?
The NETGEAR devices affected by CVE-2021-45625 include XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.
3
What is the severity level of CVE-2021-45625?
CVE-2021-45625 has a severity level of 9.8 (Critical).
4
How can an unauthenticated attacker exploit CVE-2021-45625?
An unauthenticated attacker can exploit CVE-2021-45625 through command injection.
5
Is there a fix available for CVE-2021-45625?
Yes, a fix is available for CVE-2021-45625. Please refer to the NETGEAR Security Advisory for instructions.