CVE-2021-45556 Information

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36 GS110TPP before 7.0.7.2 GS110TPv2 before 5.4.2.36. GS110TPv3 before 7.0.7.2 GS308T before 1.0.3.2 GS310TP before 1.0.3.2 GS724TPP before 2.0.6.3 GS724TPv2 before 2.0.6.3 GS728TPPv2 before 6.0.8.2 GS728TPv2 before 6.0.8.2 GS752TPP before 6.0.8.2 GS752TPv2 before 6.0.8.2 MS510TXM before 1.0.4.2 and MS510TXUP before 1.0.4.2.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Reference

https://kb.netgear.com/000064534/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Smart-Managed-Pro-Switches-PSV-2021-0175

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8