CVE-2021-20167

Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter.

CVSS v3.1

8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.7 HIGHAV:A/AC:L/Au:S/C:C/I:C/A:C

EPSS

7.78% chance of exploitation in the next 30 days, 94th percentile

Nuclei

high · CWE-77

Published

2021-12-30

Updated

2024-08-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20167.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2021-20165
• CVE-2021-2021
• CVE-2021-20160
• CVE-2021-20253
• CVE-2021-20159
• CVE-2021-20280