CVE-2021-45657 describes a server-side injection vulnerability impacting numerous NETGEAR router and mesh WiFi system models, including D6200, D7000, R6020, and various Orbi series devices. This vulnerability carries a CVSS v3.1 score of 7.8 (High), indicating a significant risk due to its potential for high confidentiality, integrity, and availability impact through local, low-privilege attacks. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Organizations should prioritize patching affected devices to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.1.00.38CPE matchmatch criteria | cpe:2.3:o:netgear:d6200_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.1.78CPE matchmatch criteria | cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.0.48CPE matchmatch criteria | cpe:2.3:o:netgear:r6020_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.0.48CPE matchmatch criteria | cpe:2.3:o:netgear:r6080_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.1.26CPE matchmatch criteria | cpe:2.3:o:netgear:r6050_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.