CVE-2021-45550: Certain NETGEAR devices are affected by command injection by an authenticated user

Q: How do I fix CVE-2021-45550?

d3600 firmware: upgrade to 1.0.0.76; d6000 firmware: upgrade to 1.0.0.78; d6100 firmware: upgrade to 1.0.0.63. Exact commands for each OS are on this page.

Q: Is CVE-2021-45550 being exploited?

CVE-2021-45550 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2021-45550 affect?

CVE-2021-45550 affects d3600 firmware, d6000 firmware, d6100 firmware. Severity is medium (CVSS 6.6). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500

Q: How urgent is CVE-2021-45550?

Priority 35/100. No elevated risk signals yet.

Routine

MEDIUM 6.6UPGRADEUPGRADEUPGRADE

CVE-2021-45550 is a medium-severity flaw (CVSS 6.6) affecting d3600 firmware, d6000 firmware, d6100 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DGN2200Bv4 before 1.0.0.109, DGN2200v4 before 1.0.0.110, R6250 before 1.0.4.34, R6300v2 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700 before 1.0.2.6, R6700v3 before 1.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.6 (Medium)
Attack vector	Adjacent network
Attack complexity	Low
Privileges needed	High
User interaction	Required
EPSS exploit chance	0.6% (top 53%)
CISA exploited list	No
Weakness	CWE-77
Published	2021-12-26
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: netgear

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2021-12-26 01:15 UTCPublished CVE record published
2026-06-17 04:13 UTCUpdated Record last modified

netgear d3600 firmware UPGRADE

Affected: < 1.0.0.76

Fixed in: 1.0.0.76

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

netgear d6000 firmware UPGRADE

Affected: < 1.0.0.78

Fixed in: 1.0.0.78

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

netgear d6100 firmware UPGRADE

Affected: < 1.0.0.63

Fixed in: 1.0.0.63

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

netgear d6220 firmware UPGRADE

Affected: < 1.0.0.52

Fixed in: 1.0.0.52

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

netgear d6400 firmware UPGRADE

Affected: < 1.0.0.86

Fixed in: 1.0.0.86

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

netgear d7800 firmware UPGRADE

Affected: < 1.0.1.56

Fixed in: 1.0.1.56

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2021-45550?

d3600 firmware: upgrade to 1.0.0.76; d6000 firmware: upgrade to 1.0.0.78; d6100 firmware: upgrade to 1.0.0.63. Exact commands for each OS are on this page.

Is CVE-2021-45550 being exploited?

CVE-2021-45550 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2021-45550 affect?

CVE-2021-45550 affects d3600 firmware, d6000 firmware, d6100 firmware. Severity is medium (CVSS 6.6). Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500

How urgent is CVE-2021-45550?

Priority 35/100. No elevated risk signals yet.

Software pages

Netgear vulnerabilities

Related CVEs

CVE-2021-45641 MEDIUM 4.6 UPGRADE UPGRADE Certain NETGEAR devices are affected by incorrect configuration of security settings
CVE-2021-45640 LOW 3.9 UPGRADE UPGRADE Certain NETGEAR devices are affected by incorrect configuration of security settings
CVE-2021-38534 MEDIUM 4.1 UPGRADE UPGRADE Certain NETGEAR devices are affected by stored XSS
CVE-2021-38525 MEDIUM 6.8 UPGRADE UPGRADE Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
CVE-2021-38514 LOW 2.4 UPGRADE UPGRADE Certain NETGEAR devices are affected by authentication bypass

References

← Back to latest CVEs