CVE-2021-45625

No fix known EPSS 2%CVSS 9.6

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.

Published 2021-12-26 · CVE record · OSV

Products: netgear xr300_firmware, netgear r7000p_firmware, netgear r6900p_firmware