CVE-2021-45623

published 2021-12-26

CVE-2021-45623: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R7800 before 1.0.2.74, R9000 before 1.0.5.2, and XR500…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R7800 before 1.0.2.74, R9000 before 1.0.5.2, and XR500 before 2.3.2.66.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netgear	r7800_firmware	< 1.0.2.74	1.0.2.74
netgear	r9000_firmware	< 1.0.5.2	1.0.5.2
netgear	xr500_firmware	< 2.3.2.66	2.3.2.66

CWE-77