CVE-2021-45556
High
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Netgear Gs108tv2 Firmware
PublishedDec 26, 2021
First seenDec 26, 2021
How to fix
Update
- netgear gs108tv2_firmware5.4.2.36 or later
- netgear gs110tpp_firmware7.0.7.2 or later
- netgear gs110tpv2_firmware5.4.2.36 or later
- netgear gs308t_firmware1.0.3.2 or later
- netgear gs110tpv3_firmware7.0.7.2 or later
- netgear gs310tp_firmware1.0.3.2 or later
- netgear gs724tpp_firmware2.0.6.3 or later
- netgear gs724tpv2_firmware2.0.6.3 or later
- netgear gs728tppv2_firmware6.0.8.2 or later
- netgear gs728tpv2_firmware6.0.8.2 or later
- netgear gs752tpp_firmware6.0.8.2 or later
- netgear gs752tpv2_firmware6.0.8.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear gs108tv2_firmware | v < 5.4.2.36 | 5.4.2.36 |
| netgear gs110tpp_firmware | v < 7.0.7.2 | 7.0.7.2 |
| netgear gs110tpv2_firmware | v < 5.4.2.36 | 5.4.2.36 |
| netgear gs308t_firmware | v < 1.0.3.2 | 1.0.3.2 |
| netgear gs110tpv3_firmware | v < 7.0.7.2 | 7.0.7.2 |
| netgear gs310tp_firmware | v < 1.0.3.2 | 1.0.3.2 |
| netgear gs724tpp_firmware | v < 2.0.6.3 | 2.0.6.3 |
| netgear gs724tpv2_firmware | v < 2.0.6.3 | 2.0.6.3 |
| netgear gs728tppv2_firmware | v < 6.0.8.2 | 6.0.8.2 |
| netgear gs728tpv2_firmware | v < 6.0.8.2 | 6.0.8.2 |
| netgear gs752tpp_firmware | v < 6.0.8.2 | 6.0.8.2 |
| netgear gs752tpv2_firmware | v < 6.0.8.2 | 6.0.8.2 |
| netgear ms510txm_firmware | v < 1.0.4.2 | 1.0.4.2 |
| netgear ms510txup_firmware | v < 1.0.4.2 | 1.0.4.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.