Vulnerability Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, and R8000P before 1.4.2.84.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R7900P Firmware | < 1.4.2.84 |
| Netgear | R7900P | - |
| Netgear | R7960P Firmware | < 1.4.2.84 |
| Netgear | R7960P | - |
| Netgear | R8000P Firmware | < 1.4.2.84 |
| Netgear | R8000P | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000064497/Security-Advisory-for-Post-Authentication-CommaPatchVendor Advisory
- https://kb.netgear.com/000064497/Security-Advisory-for-Post-Authentication-CommaPatchVendor Advisory
FAQ
What is CVE-2021-45555?
CVE-2021-45555 is a vulnerability with a CVSS score of 8.4 (HIGH). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900P before 1.4.2.84, R7960P before 1.4.2.84, and R8000P before 1.4.2.84.
How severe is CVE-2021-45555?
CVE-2021-45555 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-45555?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R7900P Firmware, Netgear R7900P, Netgear R7960P Firmware, Netgear R7960P, Netgear R8000P Firmware.