Sign-up

ID

VAR-202112-2349


CVE

CVE-2021-45600


TITLE

Netgear NETGEAR Command injection vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202112-2395

DESCRIPTION

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR750 before 4.6.3.6, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. This affects CBR750 prior to 4.6.3.6, RBK852 prior to 3.2.17.12, RBR850 prior to 3.2.17.12, and RBS850 prior to 3.2.17.12

Trust: 0.99

sources: NVD: CVE-2021-45600 // VULMON: CVE-2021-45600

AFFECTED PRODUCTS

vendor:netgearmodel:rbk852scope:ltversion:3.2.17.12

Trust: 1.0

vendor:netgearmodel:rbr850scope:ltversion:3.2.17.12

Trust: 1.0

vendor:netgearmodel:rbs850scope:ltversion:3.2.17.12

Trust: 1.0

vendor:netgearmodel:cbr750scope:ltversion:4.6.3.6

Trust: 1.0

sources: NVD: CVE-2021-45600

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2021-45600
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202112-2395
value: HIGH

Trust: 0.6

VULMON: CVE-2021-45600
value: MEDIUM

Trust: 0.1

VULMON: CVE-2021-45600
severity: MEDIUM
baseScore: 6.5
vectorString: AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

NVD: CVE-2021-45600
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.2
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULMON: CVE-2021-45600 // CNNVD: CNNVD-202112-2395 // NVD: CVE-2021-45600

PROBLEMTYPE DATA

problemtype:CWE-77

Trust: 1.0

sources: NVD: CVE-2021-45600

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202112-2395

TYPE

command injection

Trust: 0.6

sources: CNNVD: CNNVD-202112-2395

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2021-45600

PATCH
title:Netgear NETGEAR Fixes for command injection vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=177116
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-202112-2395

EXTERNAL IDS
db:NVDid:CVE-2021-45600
Trust: 1.7
db:CNNVDid:CNNVD-202112-2395
Trust: 0.6
db:VULMONid:CVE-2021-45600
Trust: 0.1
sources:
            
            
            VULMON: CVE-2021-45600 // 
            
            
            
            CNNVD: CNNVD-202112-2395 // 
            
            
            
            NVD: CVE-2021-45600

REFERENCES
url:https://kb.netgear.com/000064146/security-advisory-for-post-authentication-command-injection-on-some-wifi-systems-psv-2020-0555
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2021-45600
Trust: 0.6
url:https://cwe.mitre.org/data/definitions/77.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            VULMON: CVE-2021-45600 // 
            
            
            
            CNNVD: CNNVD-202112-2395 // 
            
            
            
            NVD: CVE-2021-45600

SOURCES
db:VULMONid:CVE-2021-45600
db:CNNVDid:CNNVD-202112-2395
db:NVDid:CVE-2021-45600

LAST UPDATE DATE
2022-05-04T08:51:47.602000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2021-45600date:2022-01-04T00:00:00
db:CNNVDid:CNNVD-202112-2395date:2022-01-06T00:00:00
db:NVDid:CVE-2021-45600date:2022-01-04T20:50:00

SOURCES RELEASE DATE
db:VULMONid:CVE-2021-45600date:2021-12-26T00:00:00
db:CNNVDid:CNNVD-202112-2395date:2021-12-26T00:00:00
db:NVDid:CVE-2021-45600date:2021-12-26T01:15:00