CVE-2021-38528 - Netgear R6900p Firmware, Netgear Wndr3400 Firmware and Netgear Xr300 Firmware

August 11, 2021

Critical 9.8

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6900P before 1.3.2.132, R7000P before 1.3.2.132, R7100LG before 1.0.0.64, WNDR3400v3 before 1.0.1.38, and XR300 before 1.0.3.56.

Affected software

Netgear R6900p Firmware

Netgear Wndr3400 Firmware

Netgear Xr300 Firmware

Netgear D8500 Firmware

Netgear R7000p Firmware

Netgear R7100lg Firmware

Reference links

https://kb.netgear.com/000063781/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Gateways-and-Routers-PSV-2020-0297

CVE-2021-38528 - Netgear R6900p Firmware, Netgear Wndr3400 Firmware and Netgear Xr300 Firmware

Affected software

Reference links

Get alerted to vulnerabilities in your software