High severity · published Dec 26, 2021
CVE-2021-45548
Certain NETGEAR devices are affected by command injection by an authenticated user
8.8
CVSS
1%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.128, EX6400 before 1.0.2.144, EX6400v2 before 1.0.0.128, EX6410 before 1.0.0.128, EX6420 before 1.0.0.128, EX7300 before 1.0.2.144, EX7300v2 before 1.0.0.128, EX7320 before 1.0.0.128, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.5.26, R9000 before 1.0.5.2, RAX120 before 1.0.1.128, WN3000RPv2 before 1.0.0.78, WN3000RPv3 before 1.0.2.80, WNR2000v5 before 1.0.0.74, XR500 before 2.3.2.66, RBK20 before 2.7.3.22, RBR20 before 2.7.3.22, RBS20 before 2.7.3.22, RBK40 before 2.7.3.22, RBR40 before 2.7.3.22, and RBS40 before 2.7.3.22.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
D7800 Firmware · Netgear
before 1.0.1.60 · source: NVD
DF
Dm200 Firmware · Netgear
before 1.0.0.66 · source: NVD
EF
Ex2700 Firmware · Netgear
before 1.0.1.56 · source: NVD
EF
Ex6150v2 Firmware · Netgear
before 1.0.1.86 · source: NVD
EF
Ex6200v2 Firmware · Netgear
before 1.0.1.86 · source: NVD
EF
Ex6250 Firmware · Netgear
before 1.0.0.128 · source: NVD
EF
Ex6400 Firmware · Netgear
before 1.0.2.144 · source: NVD
EF
Ex6400v2 Firmware · Netgear
before 1.0.0.128 · source: NVD
EF
Ex6410 Firmware · Netgear
before 1.0.0.128 · source: NVD
EF
Ex6420 Firmware · Netgear
before 1.0.0.128 · source: NVD
EF
Ex7300 Firmware · Netgear
before 1.0.2.144 · source: NVD
EF
Ex7300v2 Firmware · Netgear
before 1.0.0.128 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-45548
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-45548
Patch
https://kb.netgear.com/000064450/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2019-0207
More from D7800 Firmware
9.8
CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
9.8
CVE-2021-45658
Certain NETGEAR devices are affected by server-side injection
9.8
CVE-2021-45618
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
9.8
CVE-2021-45608
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker
9.8
CVE-2021-38529
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker