Vulnerability Description
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Cbr40 Firmware | < 2.5.0.24 |
| Netgear | Cbr40 | - |
| Netgear | Cbr750 Firmware | < 4.6.3.6 |
| Netgear | Cbr750 | - |
| Netgear | Rbk752 Firmware | < 3.2.17.12 |
| Netgear | Rbk752 | - |
| Netgear | Rbr750 Firmware | < 3.2.17.12 |
| Netgear | Rbr750 | - |
| Netgear | Rbs750 Firmware | < 3.2.17.12 |
| Netgear | Rbs750 | - |
| Netgear | Rbk852 Firmware | < 3.2.17.12 |
| Netgear | Rbk852 | - |
| Netgear | Rbr850 Firmware | < 3.2.17.12 |
| Netgear | Rbr850 | - |
| Netgear | Rbs850 Firmware | < 3.2.17.12 |
| Netgear | Rbs850 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000064135/Security-Advisory-for-Pre-Authentication-CommanPatchVendor Advisory
- https://kb.netgear.com/000064135/Security-Advisory-for-Pre-Authentication-CommanPatchVendor Advisory
FAQ
What is CVE-2021-45630?
CVE-2021-45630 is a vulnerability with a CVSS score of 10.0 (CRITICAL). Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, R...
How severe is CVE-2021-45630?
CVE-2021-45630 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-45630?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Cbr40 Firmware, Netgear Cbr40, Netgear Cbr750 Firmware, Netgear Cbr750, Netgear Rbk752 Firmware.