Vulnerability · Published Dec 30, 2021 · Assigned by tenable
CVE-2021-20173
High 8.8
In plain English
A high-severity security flaw in Netgear Nighthawk R6700. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)3.2%top 11.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Netgear Nighthawk R6700 | 1.0.4.120 |
References
- https://www.tenable.com/security/research/tra-2021-57 x_refsource_MISC