1. Home
  2. CVE Database
  3. CVE-2021-45624
CRITICAL · 9.6

CVE-2021-45624

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72,...

Vulnerability Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72, R7900 before 1.0.4.30, R8000 before 1.0.4.62, XR300 before 1.0.3.56, R7000P before 1.3.2.132, R8500 before 1.0.2.144, R6900P before 1.3.2.132, and R8300 before 1.0.2.144.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearD7000V2 Firmware< 1.0.0.66
NetgearD7000V2-
NetgearD8500 Firmware< 1.0.3.58
NetgearD8500-
NetgearR7000 Firmware< 1.0.11.110
NetgearR7000-
NetgearR7100Lg Firmware< 1.0.0.72
NetgearR7100Lg-
NetgearR7900 Firmware< 1.0.4.30
NetgearR7900-
NetgearR8000 Firmware< 1.0.4.62
NetgearR8000-
NetgearXr300 Firmware< 1.0.3.56
NetgearXr300-
NetgearR7000P Firmware< 1.3.2.132
NetgearR7000P-
NetgearR8500 Firmware< 1.0.2.144
NetgearR8500-
NetgearR6900P Firmware< 1.3.2.132
NetgearR6900P-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2021-45624?

CVE-2021-45624 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R7000 before 1.0.11.110, R7100LG before 1.0.0.72,...

How severe is CVE-2021-45624?

CVE-2021-45624 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-45624?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear D7000V2 Firmware, Netgear D7000V2, Netgear D8500 Firmware, Netgear D8500, Netgear R7000 Firmware.