CVE-2021-45552
Medium
Published: 26 December 2021
Published
26 December 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
EPSS Score
0.0019
40.3th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-45552 is a medium-severity Command Injection (CWE-77) vulnerability in Netgear D7800 Firmware. Its CVSS base score is 6.3 (Medium).
Operationally, ranked at the 40.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-32318
Vulnerability details
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.48, R7800 before 1.0.2.68, R8900 before 1.0.5.2, R9000 before 1.0.5.2, RAX120 before 1.0.1.108, and XR700 before 1.0.1.20.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
netgear
d7800 firmware
≤ 1.0.1.58
netgear
r7500v2 firmware
≤ 1.0.3.48
netgear
r7800 firmware
≤ 1.0.2.68
netgear
r8900 firmware
≤ 1.0.5.2
netgear
r9000 firmware
≤ 1.0.5.2
netgear
rax120 firmware
≤ 1.0.1.108
netgear
xr700 firmware
≤ 1.0.1.20
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.