CVE-2021-45625
published 2021-12-26CVE-2021-45625: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | r6900p_firmware | < 1.3.3.140 | 1.3.3.140 |
| netgear | r7000p_firmware | < 1.3.3.140 | 1.3.3.140 |
| netgear | xr300_firmware | < 1.0.3.68 | 1.0.3.68 |