CVE-2021-45541 - CVE House
Back to Database
Status published High CVE-2021-45541

Certain NETGEAR devices are affected by command injection by an...

Vulnerability Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7900 before 1.0.4.38, R7900P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before 3.2.16.6, RBS750 before 3.2.16.6, RBS850 before 3.2.16.6, RBK752 before 3.2.16.6, and RBK852 before 3.2.16.6.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45541

Credits & Attribution

No credits recorded in the NVD database.

References

More from netgear

View All →
CVE-2022-48322
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by...
Unknown 0
CVE-2022-48196
Certain NETGEAR devices are affected by a buffer overflow by...
High 7.4
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before...
Unknown 0
CVE-2022-47052
The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi...
Unknown 0
CVE-2022-46424
An exploitable firmware modification vulnerability was discovered on the Netgear...
Unknown 0

Affected Vendor

Affected Software

rax200 firmware, mr60 firmware, rax45 firmware, rax80 firmware, ms60 firmware, rax50 firmware, rax75 firmware, rbr750 firmware, rbr850 firmware, rbs750 firmware, rbs850 firmware, rbk752 firmware, rbk852 firmware, r7900 firmware, r8000 firmware, r7900p firmware, r8000p firmware
Vulnerable Versions:
0

Timeline

Official Publish: December 26th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.