CVE-2021-27257: This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware…

PriorityP336medium6.5CVSS 3.1

AVAACLPRNUINSUCNIHAN

EPSS

0.30%

22.4th percentile

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-12362.

Affected

44 ranges· showing 25

Vendor	Product	Version range	Fixed in
netgear	br200_firmware	< 5.10.0.5	5.10.0.5
netgear	br500_firmware	< 5.10.0.5	5.10.0.5
netgear	d7800_firmware	< 1.0.1.60	1.0.1.60
netgear	ex6100v2_firmware	< 1.0.1.98	1.0.1.98
netgear	ex6150v2_firmware	< 1.0.1.98	1.0.1.98
netgear	ex6250_firmware	< 1.0.0.134	1.0.0.134
netgear	ex6400_firmware	< 1.0.2.158	1.0.2.158
netgear	ex6400v2_firmware	< 1.0.0.134	1.0.0.134
netgear	ex6410_firmware	< 1.0.0.134	1.0.0.134
netgear	ex6420_firmware	< 1.0.0.134	1.0.0.134
netgear	ex7300_firmware	< 1.0.2.158	1.0.2.158
netgear	ex7300v2_firmware	< 1.0.0.134	1.0.0.134
netgear	ex7320_firmware	< 1.0.0.134	1.0.0.134
netgear	ex7700_firmware	< 1.0.0.216	1.0.0.216
netgear	ex8000_firmware	< 1.0.1.232	1.0.1.232
netgear	lbr20_firmware	< 2.6.3.50	2.6.3.50
netgear	r7800	—	—
netgear	r7800_firmware	< 1.0.2.80	1.0.2.80
netgear	r8900_firmware	< 1.0.5.28	1.0.5.28
netgear	r9000_firmware	< 1.0.5.28	1.0.5.28
netgear	rbk12_firmware	< 2.7.2.104	2.7.2.104
netgear	rbk13_firmware	< 2.7.2.104	2.7.2.104
netgear	rbk14_firmware	< 2.7.2.104	2.7.2.104
netgear	rbk15_firmware	< 2.7.2.104	2.7.2.104
netgear	rbk20_firmware	< 2.6.2.104	2.6.2.104

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvdv3.06.5MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.