critical9.6
CVE-2021-45625
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
Impact
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Xr300 Firmware | before 1.0.3.68 |
| Netgear | R7000p Firmware | before 1.3.3.140 |
| Netgear | R6900p Firmware | before 1.3.3.140 |