high7.5
CVE-2021-45556
Certain NETGEAR devices are affected by command injection by an authenticated user.
Impact
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Gs108tv2 Firmware | before 5.4.2.36 |
| Netgear | Gs110tpp Firmware | before 7.0.7.2 |
| Netgear | Gs110tpv2 Firmware | before 5.4.2.36 |
| Netgear | Gs308t Firmware | before 1.0.3.2 |
| Netgear | Gs110tpv3 Firmware | before 7.0.7.2 |
| Netgear | Gs310tp Firmware | before 1.0.3.2 |
| Netgear | Gs724tpp Firmware | before 2.0.6.3 |
| Netgear | Gs724tpv2 Firmware | before 2.0.6.3 |
| Netgear | Gs728tppv2 Firmware | before 6.0.8.2 |
| Netgear | Gs728tpv2 Firmware | before 6.0.8.2 |
| Netgear | Gs752tpp Firmware | before 6.0.8.2 |
| Netgear | Gs752tpv2 Firmware | before 6.0.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175
- https://kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175