Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-45591: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR8...

CVE-2021-45591 · published 4 years ago

Summary

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.

What to do

Update netgear rbk752_firmware to version 3.2.16.6 or later.
Update netgear rbr750_firmware to version 3.2.16.6 or later.
Update netgear rbs750_firmware to version 3.2.16.6 or later.
Update netgear rbk852_firmware to version 3.2.16.6 or later.
Update netgear rbr850_firmware to version 3.2.16.6 or later.
Update netgear rbs850_firmware to version 3.2.16.6 or later.

Affected software

Vendor	Product	Affected versions
netgear	rbk752_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbk752_firmware::::::::`
netgear	rbr750_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbr750_firmware::::::::`
netgear	rbs750_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbs750_firmware::::::::`
netgear	rbk852_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbk852_firmware::::::::`
netgear	rbr850_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbr850_firmware::::::::`
netgear	rbs850_firmware	< 3.2.16.6 `cpe:2.3:o:netgear:rbs850_firmware::::::::`

Original advisory text

References

https://kb.netgear.com/000064113/Security-Advisory-for-Post-Authentication-Comma... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

6.8 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-77Command Injection

Timeline

Published26 Dec 2021

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-45591 · NVD

Track software like this

Free during beta