CVE-2021-45556

CWE-77Command Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.8%
top 26.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:HExploitability: 1.0 | Impact: 6.0

Affected Packages14 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-mv6c-595h-mpx4: Certain NETGEAR devices are affected by command injection by an authenticated user2021-12-27
CVEList
CVE-2021-45556: Certain NETGEAR devices are affected by command injection by an authenticated user2021-12-26
CVE-2021-45556 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io