Vulnerability · Published Dec 30, 2021 · Assigned by tenable
CVE-2021-20167
High 8.0
In plain English
A high-severity security flaw in Netgear RAX43. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.0% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)8.0High
Exploit odds (30 days)7.0%top 5.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Netgear RAX43 | 1.0.3.96 |
References
- https://www.tenable.com/security/research/tra-2021-55 x_refsource_MISC