What’s Vulnerable › Vulnerabilities

CVE-2021-41383

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-17 · updated 2026-06-17
• Weakness: CWE-77

Description

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.

Affected products

• NETGEAR R6020 Firmware: 1.0.0.48

References

• https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html
• https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html

Get alerted when CVE-2021-41383 or the next vulnerability affects your stack