CVE-2021-45513

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Dec 26, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-455148.8NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.CVE-2021-455156.5Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4,CVE-2021-455164.5Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.3.CVE-2021-455176.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455186.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455196.5NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.CVE-2021-455208.8Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 beforeCVE-2021-455216.5Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 beforeCVE-2021-455228.8NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.CVE-2021-455236.5NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.CVE-2021-455249.1NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user.CVE-2021-455258.8Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80, R6400 before 1.0.1.
CVE-2021-45513: Critical severity, CVSS 9.6 | Vulnix