CVE-2021-45557
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TUP before 1.0.5.3, GS710TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS724TPP before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS750E before 1.0.1.10, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autenticado. Esto afecta a GC108P versiones anteriores a 1.0.8.2, GC108PP versiones anteriores a 1.0.8.2, GS108Tv3 versiones anteriores a 7.0.7.2, GS110TPv3 versiones anteriores a 7.0.7.2, GS110TPP versiones anteriores a 7.0.7. 2, GS110TUP versiones anteriores a 1.0.5.3, GS710TUP versiones anteriores a 1.0.5.3, GS308T versiones anteriores a 1.0.3.2, GS310TP versiones anteriores a 1.0.3.2, GS710TUP versiones anteriores a 1.0.5.3, GS716TP versiones anteriores a 1.0.4. 2, GS716TPP versiones anteriores a 1.0.4.2, GS724TPP versiones anteriores a 2.0.6.3, GS724TPv2 versiones anteriores a 2.0.6.3, GS724TPP versiones anteriores a 2.0.6.3, GS728TPPv2 versiones anteriores a 6.0.8.2, GS728TPv2 versiones anteriores a 6. 0.8.2, GS752TPv2 versiones anteriores a 6.0.8.2, GS752TPP versiones anteriores a 6.0.8.2, GS750E versiones anteriores a 1.0.1.10, MS510TXM versiones anteriores a 1.0.4.2 y MS510TXUP versiones anteriores a 1.0.4.2
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-12-25 CVE Reserved
- 2021-12-26 CVE Published
- 2024-08-04 CVE Updated
- 2024-10-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://kb.netgear.com/000064164/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Switches-PSV-2021-0167 | 2022-01-10 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Gc108p Firmware Search vendor "Netgear" for product "Gc108p Firmware" | < 1.0.8.2 Search vendor "Netgear" for product "Gc108p Firmware" and version " < 1.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gc108p Search vendor "Netgear" for product "Gc108p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gc108pp Firmware Search vendor "Netgear" for product "Gc108pp Firmware" | < 1.0.8.2 Search vendor "Netgear" for product "Gc108pp Firmware" and version " < 1.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gc108pp Search vendor "Netgear" for product "Gc108pp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs108tv3 Firmware Search vendor "Netgear" for product "Gs108tv3 Firmware" | < 7.0.7.2 Search vendor "Netgear" for product "Gs108tv3 Firmware" and version " < 7.0.7.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs108tv3 Search vendor "Netgear" for product "Gs108tv3" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tpv3 Firmware Search vendor "Netgear" for product "Gs110tpv3 Firmware" | < 7.0.7.2 Search vendor "Netgear" for product "Gs110tpv3 Firmware" and version " < 7.0.7.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tpv3 Search vendor "Netgear" for product "Gs110tpv3" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tpp Firmware Search vendor "Netgear" for product "Gs110tpp Firmware" | < 7.0.7.2 Search vendor "Netgear" for product "Gs110tpp Firmware" and version " < 7.0.7.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tpp Search vendor "Netgear" for product "Gs110tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs110tup Firmware Search vendor "Netgear" for product "Gs110tup Firmware" | < 1.0.5.3 Search vendor "Netgear" for product "Gs110tup Firmware" and version " < 1.0.5.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs110tup Search vendor "Netgear" for product "Gs110tup" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs710tup Firmware Search vendor "Netgear" for product "Gs710tup Firmware" | < 1.0.5.3 Search vendor "Netgear" for product "Gs710tup Firmware" and version " < 1.0.5.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs710tup Search vendor "Netgear" for product "Gs710tup" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs308t Firmware Search vendor "Netgear" for product "Gs308t Firmware" | < 1.0.3.2 Search vendor "Netgear" for product "Gs308t Firmware" and version " < 1.0.3.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs308t Search vendor "Netgear" for product "Gs308t" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs310tp Firmware Search vendor "Netgear" for product "Gs310tp Firmware" | < 1.0.3.2 Search vendor "Netgear" for product "Gs310tp Firmware" and version " < 1.0.3.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs310tp Search vendor "Netgear" for product "Gs310tp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs710tup Firmware Search vendor "Netgear" for product "Gs710tup Firmware" | < 1.0.5.3 Search vendor "Netgear" for product "Gs710tup Firmware" and version " < 1.0.5.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs710tup Search vendor "Netgear" for product "Gs710tup" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs716tp Firmware Search vendor "Netgear" for product "Gs716tp Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Gs716tp Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs716tp Search vendor "Netgear" for product "Gs716tp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs716tpp Firmware Search vendor "Netgear" for product "Gs716tpp Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Gs716tpp Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs716tpp Search vendor "Netgear" for product "Gs716tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tpp Firmware Search vendor "Netgear" for product "Gs724tpp Firmware" | < 2.0.6.3 Search vendor "Netgear" for product "Gs724tpp Firmware" and version " < 2.0.6.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tpp Search vendor "Netgear" for product "Gs724tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tpv2 Firmware Search vendor "Netgear" for product "Gs724tpv2 Firmware" | < 2.0.6.3 Search vendor "Netgear" for product "Gs724tpv2 Firmware" and version " < 2.0.6.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tpv2 Search vendor "Netgear" for product "Gs724tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs724tpp Firmware Search vendor "Netgear" for product "Gs724tpp Firmware" | < 2.0.6.3 Search vendor "Netgear" for product "Gs724tpp Firmware" and version " < 2.0.6.3" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs724tpp Search vendor "Netgear" for product "Gs724tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs728tppv2 Firmware Search vendor "Netgear" for product "Gs728tppv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs728tppv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs728tppv2 Search vendor "Netgear" for product "Gs728tppv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs728tpv2 Firmware Search vendor "Netgear" for product "Gs728tpv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs728tpv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs728tpv2 Search vendor "Netgear" for product "Gs728tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs752tpv2 Firmware Search vendor "Netgear" for product "Gs752tpv2 Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs752tpv2 Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs752tpv2 Search vendor "Netgear" for product "Gs752tpv2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs752tpp Firmware Search vendor "Netgear" for product "Gs752tpp Firmware" | < 6.0.8.2 Search vendor "Netgear" for product "Gs752tpp Firmware" and version " < 6.0.8.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs752tpp Search vendor "Netgear" for product "Gs752tpp" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Gs750e Firmware Search vendor "Netgear" for product "Gs750e Firmware" | < 1.0.1.10 Search vendor "Netgear" for product "Gs750e Firmware" and version " < 1.0.1.10" | - |
Affected
| in | Netgear Search vendor "Netgear" | Gs750e Search vendor "Netgear" for product "Gs750e" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ms510txm Firmware Search vendor "Netgear" for product "Ms510txm Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Ms510txm Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ms510txm Search vendor "Netgear" for product "Ms510txm" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ms510txup Firmware Search vendor "Netgear" for product "Ms510txup Firmware" | < 1.0.4.2 Search vendor "Netgear" for product "Ms510txup Firmware" and version " < 1.0.4.2" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ms510txup Search vendor "Netgear" for product "Ms510txup" | - | - |
Safe
|