Medium severity6.6NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026

CVE-2021-38520

Description

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52, R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, and R7000P before 1.3.2.124.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/R6400 Firmware
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.52
Netgear/R6700 Firmware
cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*
Range: <1.2.0.62
Netgear/R6900 Firmware
cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*
Range: <1.2.0.62
Netgear/R7000p Firmware
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
Range: <1.3.2.124
NETGEAR/devicesdescription
Netgear/R6400llm-fuzzy
Range: <1.0.1.52
Netgear/R7000Pllm-fuzzy
Range: <1.3.2.124
Netgear/R6700v3llm-fuzzy
Range: <1.0.4.84
Netgear/R6700v2llm-fuzzy
Range: <1.2.0.62
Netgear/R6900v2llm-fuzzy
Range: <1.2.0.62
Netgear/R6400v2llm-fuzzy
Range: <1.0.4.84

Patches

Vulnerability mechanics

References

kb.netgear.com/000063763/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2018-0565nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.429
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000