Critical severity9.6NVD Advisory· Published Dec 26, 2021· Updated Jun 17, 2026

CVE-2021-45625

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0.3.68, R7000P before 1.3.3.140, and R6900P before 1.3.3.140.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/R6900p Firmware
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
Range: <1.3.3.140
Netgear/R7000p Firmware
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
Range: <1.3.3.140
Netgear/Xr300 Firmware
cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.68
NETGEAR/NETGEAR devicesdescription
Netgear/R7000Pllm-fuzzy
Range: <1.3.3.140
Netgear/XR300llm-fuzzy
Range: <1.0.3.68
Netgear/R6900Pllm-fuzzy
Range: <1.3.3.140

Patches

Vulnerability mechanics

References

kb.netgear.com/000064489/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0371nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000