CVE-2021-45590
Description
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Authenticated command injection in certain NETGEAR WiFi systems allows attackers to execute arbitrary commands on affected devices.
Vulnerability
A command injection vulnerability exists in certain NETGEAR WiFi system models when an authenticated user sends crafted input. Affected models include RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 running firmware versions prior to 3.2.16.6. [1]
Exploitation
An attacker must be authenticated to the device's web interface. No additional network access or user interaction is required beyond authentication. The attacker can inject arbitrary operating system commands through the vulnerable input fields. [1]
Impact
Successful exploitation allows the attacker to execute arbitrary commands with the privileges of the web server process. This can lead to full device compromise, including unauthorized access to sensitive information, modification of device configuration, and potential use as a pivot point within the network. [1]
Mitigation
The vulnerability is fixed in firmware version 3.2.16.6. NETGEAR strongly recommends downloading and installing the latest firmware from the NETGEAR Support website for each affected model. No workaround is available. [1]
AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
4- NETGEAR/NETGEAR devicesdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.