Lbr20 Firmware
CVE-2021-45595
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22.
AnalysisAI
Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Command Injection (CWE-77), which allows attackers to inject arbitrary commands into system command execution. Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, RBR10 before 2.7.3.22, RBR20 before 2.7.3.22, RBR40 before 2.7.3.22, RBR50 before 2.7.3.22, RBS10 before 2.7.3.22, RBS20 before 2.7.3.22, RBS40 before 2.7.3.22, RBS50 before 2.7.3.22, RBK12 before 2.7.3.22, RBK20 before 2.7.3.22, RBK40 before 2.7.3.22, and RBK50 before 2.7.3.22. Affected products include: Netgear Lbr20 Firmware, Netgear Rbs50Y Firmware, Netgear Rbr10 Firmware, Netgear Rbr20 Firmware, Netgear Rbr40 Firmware. Version information: before 2.6.3.50.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized APIs, avoid shell execution, validate input with strict allowlists.
More in Lbr20 Firmware
View allCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nigh
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800
Certain NETGEAR devices are affected by command injection by an authenticated user. Rated high severity (CVSS 7.8), this
Certain NETGEAR devices are affected by disclosure of sensitive information. Rated high severity (CVSS 7.5), this vulner
Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated high severity (CVSS 7.2), th
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today