← Database

CVE-2021-45625

CRITICAL CVSS: 9.6 Published: 2021-12-26 Modified: 2026-06-17

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.

Affected Platforms

Netgear R7000PNetgear R6900P FirmwareNetgear R7000P FirmwareNetgear R6900PNetgear Xr300Netgear Xr300 Firmware

Weakness Type

CWE-77

References