CVE-2021-45602: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2…

high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before 1.0.5.38, R9000 before 1.0.5.38, RAX10 before 1.0.10.110, RAX120v1 before 1.2.3.28, RAX120v2 before 1.2.3.28, RAX70 before 1.0.10.110, RAX78 before 1.0.10.110, XR450 before 2.3.2.130, XR500 before 2.3.2.130, and XR700 before 1.0.1.46.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
netgear	d7800_firmware	< 1.0.1.66	1.0.1.66
netgear	ex2700_firmware	< 1.0.1.68	1.0.1.68
netgear	lbr1020_firmware	< 2.6.5.20	2.6.5.20
netgear	lbr20_firmware	< 2.6.5.32	2.6.5.32
netgear	r6700ax_firmware	< 1.0.10.110	1.0.10.110
netgear	r7800_firmware	< 1.0.2.86	1.0.2.86
netgear	r8900_firmware	< 1.0.5.38	1.0.5.38
netgear	r9000_firmware	< 1.0.5.38	1.0.5.38
netgear	rax10_firmware	< 1.0.10.110	1.0.10.110
netgear	rax120v1_firmware	< 1.2.3.28	1.2.3.28
netgear	rax120v2_firmware	< 1.2.3.28	1.2.3.28
netgear	rax70_firmware	< 1.0.10.110	1.0.10.110
netgear	rax78_firmware	< 1.0.10.110	1.0.10.110
netgear	wn3000rpv2_firmware	< 1.0.0.90	1.0.0.90
netgear	wn3000rpv3_firmware	< 1.0.2.100	1.0.2.100
netgear	xr450_firmware	< 2.3.2.130	2.3.2.130
netgear	xr500_firmware	< 2.3.2.130	2.3.2.130
netgear	xr700_firmware	< 1.0.1.46	1.0.1.46