← Back to CVE List
Vulnerability Intelligence Report

CVE-2021-45548

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.128, EX6400 before 1.0.2.144, EX6400v2 before 1.0.0.128, EX6410 before 1.0.0.128, EX6420 before 1.0.0.128, EX7300 before 1.0.2.144, EX7300v2 before 1.0.0.128, EX7320 before 1.0.0.128, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.5.26, R9000 before 1.0.5.2, RAX120 before 1.0.1.128, WN3000RPv2 before 1.0.0.78, WN3000RPv3 before 1.0.2.80, WNR2000v5 before 1.0.0.74, XR500 before 2.3.2.66, RBK20 before 2.7.3.22, RBR20 before 2.7.3.22, RBS20 before 2.7.3.22, RBK40 before 2.7.3.22, RBR40 before 2.7.3.22, and RBS40 before 2.7.3.22.

No Active Exploit Signals
CVSS Base Score
6.3
MEDIUM
Exploitability:0.8
Impact Score:5.5
EPSS Probability:0.95%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
netgear d7800_firmware all
netgear d7800 all
netgear dm200_firmware all
netgear dm200 all
netgear ex2700_firmware all
netgear ex2700 all
netgear ex6150v2_firmware all
netgear ex6150v2 all
netgear ex6200v2_firmware all
netgear ex6200v2 all
netgear ex6250_firmware all
netgear ex6250 all
netgear ex6400_firmware all
netgear ex6400 all
netgear ex6400v2_firmware all
netgear ex6400v2 all
netgear ex6410_firmware all
netgear ex6410 all
netgear ex6420_firmware all
netgear ex6420 all
netgear ex7300_firmware all
netgear ex7300 all
netgear ex7300v2_firmware all
netgear ex7300v2 all
netgear ex7320_firmware all
netgear ex7320 all
netgear r7500v2_firmware all
netgear r7500v2 all
netgear r7800_firmware all
netgear r7800 all
netgear r8900_firmware all
netgear r8900 all
netgear r9000_firmware all
netgear r9000 all
netgear rax120_firmware all
netgear rax120 all
netgear wn3000rpv2_firmware all
netgear wn3000rpv2 all
netgear wn3000rpv3_firmware all
netgear wn3000rpv3 all
netgear wnr2000v5_firmware all
netgear xr500_firmware all
netgear xr500 all
netgear rbk20_firmware all
netgear rbk20 all
netgear rbr20_firmware all
netgear rbr20 all
netgear rbs20_firmware all
netgear rbs20 all
netgear rbk40_firmware all
netgear rbk40 all
netgear rbr40_firmware all
netgear rbr40 all
netgear rbs40_firmware all
netgear rbs40 all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.954%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2021-12-25T00:00:00
Published2021-12-26T00:52:37
Last Updated2024-08-04T04:39:21

LINK COPIED TO CLIPBOARD