Vulnerability Intelligence Report
CVE-2021-45626
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK20 before 2.6.1.36, RBR20 before 2.6.1.36, RBS20 before 2.6.1.38, RBK40 before 2.6.1.36, RBR40 before 2.6.1.36, RBS40 before 2.6.1.38, RBK50 before 2.6.1.40, RBR50 before 2.6.1.40, RBS50 before 2.6.1.40, and RBS50Y before 2.6.1.40.
No Active Exploit Signals
CVSS Base Score
9.6
CRITICAL
Exploitability:2.9
Impact Score:6.1
EPSS Probability:0.77%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| netgear | rbk20_firmware | all |
| netgear | rbk20 | all |
| netgear | rbr20_firmware | all |
| netgear | rbr20 | all |
| netgear | rbs20_firmware | all |
| netgear | rbs20 | all |
| netgear | rbk40_firmware | all |
| netgear | rbk40 | all |
| netgear | rbr40_firmware | all |
| netgear | rbr40 | all |
| netgear | rbs40_firmware | all |
| netgear | rbs40 | all |
| netgear | rbk50_firmware | all |
| netgear | rbk50 | all |
| netgear | rbr50_firmware | all |
| netgear | rbr50 | all |
| netgear | rbs50_firmware | all |
| netgear | rbs50 | all |
| netgear | rbs50y_firmware | all |
| netgear | rbs50y | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.770%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-12-25T00:00:00 |
| Published | 2021-12-26T00:34:00 |
| Last Updated | 2024-08-04T04:47:01 |
Community Chatter & Buzz