CVE-2021-29071 - CVE House
Back to Database
Status published Critical CVE-2021-29071

Certain NETGEAR devices are affected by command injection by an...

Vulnerability Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBR752 before 3.2.17.12, RBR753 before 3.2.17.12, RBR753S before 3.2.17.12, RBR754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-29071

Credits & Attribution

No credits recorded in the NVD database.

References

More from netgear

View All →
CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by...
Unknown 0
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by...
High 7.4
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before...
Unknown 0
CVE-2022-47052
The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi...
Unknown 0
CVE-2022-46424
An exploitable firmware modification vulnerability was discovered on the Netgear...
Unknown 0

Affected Vendor

Affected Software

rbk852 firmware, rbk853 firmware, rbk854 firmware, rbr850 firmware, rbs850 firmware, rbr752 firmware, rbr753 firmware, rbr753s firmware, rbr754 firmware, rbr750 firmware, rbs750 firmware
Vulnerable Versions:
0

Timeline

Official Publish: March 23rd, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.