CVE-2021-45556
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a GS108Tv2 versiones anteriores a 5.4.2.36, GS110TPP versiones anteriores a 7.0.7.2, GS110TPv2 versiones anteriores a 5.4.2.36., GS110TPv3 versiones anteriores a 7.0.7.2, GS308T versiones anteriores a 1.0.3.2, GS310TP versiones anteriores a 1.0.3.2, GS724TPP versiones anteriores a 2.0.6. 3, GS724TPv2 versiones anteriores a 2.0.6.3, GS728TPPv2 versiones anteriores a 6.0.8.2, GS728TPv2 versiones anteriores a 6.0.8.2, GS752TPP versiones anteriores a 6.0.8.2, GS752TPv2 versiones anteriores a 6.0.8.2, MS510TXM versiones anteriores a 1.0.4.2 y MS510TXUP versiones anteriores a 1.0.4.2
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-12-25 CVE Reserved
- 2021-12-26 CVE Published
- 2024-08-04 CVE Updated
- 2024-10-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175 | 2022-01-10 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Gs108tv2 Firmware Search vendor "Netgear" for product "Gs108tv2 Firmware" | < 5.4.2.36 Search vendor "Netgear" for product "Gs108tv2 Firmware" and version " < 5.4.2.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs108tv2 Search vendor "Netgear" for product "Gs108tv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tpp Firmware Search vendor "Netgear" for product "Gs110tpp Firmware" | < 7.0.7.2 Search vendor "Netgear" for product "Gs110tpp Firmware" and version " < 7.0.7.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tpp Search vendor "Netgear" for product "Gs110tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tpv2 Firmware Search vendor "Netgear" for product "Gs110tpv2 Firmware" | < 5.4.2.36 Search vendor "Netgear" for product "Gs110tpv2 Firmware" and version " < 5.4.2.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tpv2 Search vendor "Netgear" for product "Gs110tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs308t Firmware Search vendor "Netgear" for product "Gs308t Firmware" | < 1.0.3.2 Search vendor "Netgear" for product "Gs308t Firmware" and version " < 1.0.3.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs308t Search vendor "Netgear" for product "Gs308t" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tpv3 Firmware Search vendor "Netgear" for product "Gs110tpv3 Firmware" | < 7.0.7.2 Search vendor "Netgear" for product "Gs110tpv3 Firmware" and version " < 7.0.7.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tpv3 Search vendor "Netgear" for product "Gs110tpv3" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs310tp Firmware Search vendor "Netgear" for product "Gs310tp Firmware" | < 1.0.3.2 Search vendor "Netgear" for product "Gs310tp Firmware" and version " < 1.0.3.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs310tp Search vendor "Netgear" for product "Gs310tp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tpp Firmware Search vendor "Netgear" for product "Gs724tpp Firmware" | < 2.0.6.3 Search vendor "Netgear" for product "Gs724tpp Firmware" and version " < 2.0.6.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tpp Search vendor "Netgear" for product "Gs724tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tpv2 Firmware Search vendor "Netgear" for product "Gs724tpv2 Firmware" | < 2.0.6.3 Search vendor "Netgear" for product "Gs724tpv2 Firmware" and version " < 2.0.6.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tpv2 Search vendor "Netgear" for product "Gs724tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs728tppv2 Firmware Search vendor "Netgear" for product "Gs728tppv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs728tppv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs728tppv2 Search vendor "Netgear" for product "Gs728tppv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs728tpv2 Firmware Search vendor "Netgear" for product "Gs728tpv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs728tpv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs728tpv2 Search vendor "Netgear" for product "Gs728tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs752tpp Firmware Search vendor "Netgear" for product "Gs752tpp Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs752tpp Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs752tpp Search vendor "Netgear" for product "Gs752tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs752tpv2 Firmware Search vendor "Netgear" for product "Gs752tpv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs752tpv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs752tpv2 Search vendor "Netgear" for product "Gs752tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ms510txm Firmware Search vendor "Netgear" for product "Ms510txm Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Ms510txm Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ms510txm Search vendor "Netgear" for product "Ms510txm" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ms510txup Firmware Search vendor "Netgear" for product "Ms510txup Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Ms510txup Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ms510txup Search vendor "Netgear" for product "Ms510txup" | - | - |
Safe
|