CVE-2021-38529
HIGH8.3CVSS v3
7.5CVSS v2
1.87%
EPSS (exploit probability)
CWE-77CWE
Description
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26.
CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Netgear | Netgear Nighthawk R7800 | — |
versionEndExcluding=1.0.2.68 | 1.0.2.68 | Patched |