PT-2021-6228 · NetGear · Rbs50+13
Published
2021-12-21
·
Updated
2022-01-05
·
CVE-2021-45595
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
LBR20 versions prior to 2.6.3.50
RBS50Y versions prior to 2.7.3.22
RBR10 versions prior to 2.7.3.22
RBR20 versions prior to 2.7.3.22
RBR40 versions prior to 2.7.3.22
RBR50 versions prior to 2.7.3.22
RBS10 versions prior to 2.7.3.22
RBS20 versions prior to 2.7.3.22
RBS40 versions prior to 2.7.3.22
RBS50 versions prior to 2.7.3.22
RBK12 versions prior to 2.7.3.22
RBK20 versions prior to 2.7.3.22
RBK40 versions prior to 2.7.3.22
RBK50 versions prior to 2.7.3.22
Description
The issue is related to command injection by an authenticated user due to the lack of input data sanitization. This allows a remote attacker to execute arbitrary commands.
Recommendations
For LBR20 version prior to 2.6.3.50, update to version 2.6.3.50 or later.
For RBS50Y version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBR10 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBR20 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBR40 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBR50 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBS10 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBS20 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBS40 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBS50 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBK12 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBK20 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBK40 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
For RBK50 version prior to 2.7.3.22, update to version 2.7.3.22 or later.
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lbr20
Rbk12
Rbk20
Rbk40
Rbk50
Rbr10
Rbr20
Rbr40
Rbr50
Rbs10
Rbs20
Rbs40
Rbs50
Rbs50Y