CVE-2021-45557

CWE-77Command Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.5%
top 33.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TUP before 1.0.5.3, GS710TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS724TPP before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728T

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:HExploitability: 1.0 | Impact: 6.0

Affected Packages20 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-h2pj-589h-m8gr: Certain NETGEAR devices are affected by command injection by an authenticated user2021-12-27
CVEList
CVE-2021-45557: Certain NETGEAR devices are affected by command injection by an authenticated user2021-12-26
CVE-2021-45557 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io