HIGH

CVE-2021-20173

CVSS v3

8.8

HIGH

EPSS Score

11.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.

Technical details

Published
12/30/2021

Frequently asked questions

What is CVE-2021-20173?

Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.

Is CVE-2021-20173 actively exploited?

Active exploitation of CVE-2021-20173 has not been confirmed. The EPSS score is 11.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-20173?

CVE-2021-20173 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2021-20173 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2021 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database