CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be installed may overwrite certain files to obtain privilege escalation to root.

• CWE-732

• https://www.tenable.com/security/research/tra-2021-56Exploit, Third Party Advisory
• https://www.tenable.com/security/research/tra-2021-56Exploit, Third Party Advisory

Published

Dec 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20167Netgear RAX43 version 1.0.3.96 contains a command injection …8
• CVE-2021-20168Netgear RAX43 version 1.0.3.96 does not have sufficient prot…6.8
• CVE-2021-20169Netgear RAX43 version 1.0.3.96 does not utilize secure commu…6.8
• CVE-2021-2017Vulnerability in the Oracle User Management product of Oracl…4.3
• CVE-2021-20170Netgear RAX43 version 1.0.3.96 makes use of hardcoded creden…8.8
• CVE-2021-20171Netgear RAX43 version 1.0.3.96 stores sensitive information …5.5
• CVE-2021-20173Netgear Nighthawk R6700 version 1.0.4.120 contains a command…8.8
• CVE-2021-20174Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20175Netgear Nighthawk R6700 version 1.0.4.120 does not utilize s…7.5
• CVE-2021-20176A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and…5.5
• CVE-2021-20177A flaw was found in the Linux kernel's implementation of str…4.4
• CVE-2021-20178A flaw was found in ansible module where credentials are dis…5.5