CVEvulnerability

CVE-2021-45556

8.8 HIGH Published 2021-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-77

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

Affected configurations

• netgear gs108tv2 firmware (< 5.4.2.36) • netgear gs110tpp firmware (< 7.0.7.2) • netgear gs110tpv2 firmware (< 5.4.2.36) • netgear gs308t firmware (< 1.0.3.2) • netgear gs110tpv3 firmware (< 7.0.7.2) • netgear gs310tp firmware (< 1.0.3.2) • netgear gs724tpp firmware (< 2.0.6.3) • netgear gs724tpv2 firmware (< 2.0.6.3) • netgear gs728tppv2 firmware (< 6.0.8.2) • netgear gs728tpv2 firmware (< 6.0.8.2) • netgear gs752tpp firmware (< 6.0.8.2) • netgear gs752tpv2 firmware (< 6.0.8.2) • netgear ms510txm firmware (< 1.0.4.2) • netgear ms510txup firmware (< 1.0.4.2)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References