1. Home
  2. CVE Database
  3. CVE-2021-45557
HIGH · 7.5

CVE-2021-45557

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110...

Vulnerability Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TUP before 1.0.5.3, GS710TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS724TPP before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS750E before 1.0.1.10, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearGc108P Firmware< 1.0.8.2
NetgearGc108P-
NetgearGc108Pp Firmware< 1.0.8.2
NetgearGc108Pp-
NetgearGs108Tv3 Firmware< 7.0.7.2
NetgearGs108Tv3-
NetgearGs110Tpv3 Firmware< 7.0.7.2
NetgearGs110Tpv3-
NetgearGs110Tpp Firmware< 7.0.7.2
NetgearGs110Tpp-
NetgearGs110Tup Firmware< 1.0.5.3
NetgearGs110Tup-
NetgearGs710Tup Firmware< 1.0.5.3
NetgearGs710Tup-
NetgearGs308T Firmware< 1.0.3.2
NetgearGs308T-
NetgearGs310Tp Firmware< 1.0.3.2
NetgearGs310Tp-
NetgearGs716Tp Firmware< 1.0.4.2
NetgearGs716Tp-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2021-45557?

CVE-2021-45557 is a vulnerability with a CVSS score of 7.5 (HIGH). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110...

How severe is CVE-2021-45557?

CVE-2021-45557 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-45557?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Gc108P Firmware, Netgear Gc108P, Netgear Gc108Pp Firmware, Netgear Gc108Pp, Netgear Gs108Tv3 Firmware.