CVE-2021-41383: NETGEAR r6020 Firmware

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.

Affected products

  • NETGEAR r6020 Firmware: version 1.0.0.48 only

Published 2021-09-17. Last modified 2026-06-17.