← Database

CVE-2021-38528

CRITICAL CVSS: 9.6 Published: 2021-08-11 Modified: 2026-06-17

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P before 1.3.2.132, R7100LG before 1.0.0.64, WNDR3400v3 before 1.0.1.38, and XR300 before 1.0.3.56.

Affected Platforms

Netgear D8500Netgear R6900P FirmwareNetgear R7000P FirmwareNetgear R7000PNetgear Wndr3400Netgear R6900PNetgear D8500 FirmwareNetgear R7100Lg FirmwareNetgear Wndr3400 FirmwareNetgear R7100Lg

Weakness Type

CWE-77

References