Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-45557

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TUP before 1.0.5.3, GS710TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS724TPP before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS750E before 1.0.1.10, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it requires adjacent network access but requires specific conditions to be met without requiring user interaction . The vulnerability impacts limited data confidentiality, integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 40 products from netgear, from netgear, from netgear and 37 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2021-12-26T01:15:15.707

Last Modified

2024-11-21T06:32:30.807

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear gc108p_firmware < 1.0.8.2 Yes
Hardware netgear gc108p - No
Operating System netgear gc108pp_firmware < 1.0.8.2 Yes
Hardware netgear gc108pp - No
Operating System netgear gs108tv3_firmware < 7.0.7.2 Yes
Hardware netgear gs108tv3 - No
Operating System netgear gs110tpv3_firmware < 7.0.7.2 Yes
Hardware netgear gs110tpv3 - No
Operating System netgear gs110tpp_firmware < 7.0.7.2 Yes
Hardware netgear gs110tpp - No
Operating System netgear gs110tup_firmware < 1.0.5.3 Yes
Hardware netgear gs110tup - No
Operating System netgear gs710tup_firmware < 1.0.5.3 Yes
Hardware netgear gs710tup - No
Operating System netgear gs308t_firmware < 1.0.3.2 Yes
Hardware netgear gs308t - No
Operating System netgear gs310tp_firmware < 1.0.3.2 Yes
Hardware netgear gs310tp - No
Operating System netgear gs710tup_firmware < 1.0.5.3 Yes
Hardware netgear gs710tup - No
Operating System netgear gs716tp_firmware < 1.0.4.2 Yes
Hardware netgear gs716tp - No
Operating System netgear gs716tpp_firmware < 1.0.4.2 Yes
Hardware netgear gs716tpp - No
Operating System netgear gs724tpp_firmware < 2.0.6.3 Yes
Hardware netgear gs724tpp - No
Operating System netgear gs724tpv2_firmware < 2.0.6.3 Yes
Hardware netgear gs724tpv2 - No
Operating System netgear gs724tpp_firmware < 2.0.6.3 Yes
Hardware netgear gs724tpp - No
Operating System netgear gs728tppv2_firmware < 6.0.8.2 Yes
Hardware netgear gs728tppv2 - No
Operating System netgear gs728tpv2_firmware < 6.0.8.2 Yes
Hardware netgear gs728tpv2 - No
Operating System netgear gs752tpv2_firmware < 6.0.8.2 Yes
Hardware netgear gs752tpv2 - No
Operating System netgear gs752tpp_firmware < 6.0.8.2 Yes
Hardware netgear gs752tpp - No
Operating System netgear gs750e_firmware < 1.0.1.10 Yes
Hardware netgear gs750e - No
Operating System netgear ms510txm_firmware < 1.0.4.2 Yes
Hardware netgear ms510txm - No
Operating System netgear ms510txup_firmware < 1.0.4.2 Yes
Hardware netgear ms510txup - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For netgear's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.