Threat Investigation
Request a demo

CVE-2021-29069

High

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76.

SeverityHigh
CVSS7.3
Exploit probability—
ProductNetgear Xr450 Firmware
PublishedMar 23, 2021
First seenMar 23, 2021

How to fix

Update
  • netgear xr450_firmware2.3.2.114 or later
  • netgear xr500_firmware2.3.2.114 or later
  • netgear wnr2000v5_firmware1.0.0.76 or later

Affected products

ProductAffected versionsFixed in
netgear xr450_firmwarev < 2.3.2.1142.3.2.114
netgear xr500_firmwarev < 2.3.2.1142.3.2.114
netgear wnr2000v5_firmwarev < 1.0.0.761.0.0.76

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.