Vulnerability Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R6900P before 1.3.2.126, and R7000P before 1.3.2.126.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R7000 Firmware | < 1.0.11.126 |
| Netgear | R7000 | - |
| Netgear | R6900P Firmware | < 1.3.2.126 |
| Netgear | R6900P | - |
| Netgear | R7000P Firmware | < 1.3.2.126 |
| Netgear | R7000P | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000064074/Security-Advisory-for-Post-Authentication-CommaPatchVendor Advisory
- https://kb.netgear.com/000064074/Security-Advisory-for-Post-Authentication-CommaPatchVendor Advisory
FAQ
What is CVE-2021-45553?
CVE-2021-45553 is a vulnerability with a CVSS score of 8.7 (HIGH). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7000 before 1.0.11.126, R6900P before 1.3.2.126, and R7000P before 1.3.2.126.
How severe is CVE-2021-45553?
CVE-2021-45553 has been rated HIGH with a CVSS base score of 8.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-45553?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R7000 Firmware, Netgear R7000, Netgear R6900P Firmware, Netgear R6900P, Netgear R7000P Firmware.