CVE-2021-29069

published 2021-03-23

CVE-2021-29069: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5…

high 8.4 CVSS 3.1

AV A AC L PR H UI N S C C H I H A H

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netgear	wnr2000v5_firmware	< 1.0.0.76	1.0.0.76
netgear	xr450_firmware	< 2.3.2.114	2.3.2.114
netgear	xr500_firmware	< 2.3.2.114	2.3.2.114

CWE-77