CVE-2021-45526

Severity
8.8HIGH
EPSS
0.4%
top 39.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 before 1.0.4.30, R8000 before 1.0.4.52, R7000P before 1.3.2.124, R8000P before 1.4.1.50, RAX80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:HExploitability: 1.5 | Impact: 5.3

Affected Packages14 packages

NVDnetgear/r7000p_firmware< 1.3.2.124
NVDnetgear/r7900p_firmware< 1.4.1.50
NVDnetgear/r8000p_firmware< 1.4.1.50
NVDnetgear/r6400_firmware< 1.0.1.52
NVDnetgear/r7000_firmware< 1.0.11.126

Patches

🔴Vulnerability Details

2
GHSA
GHSA-c8w9-7pxw-2m9j: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user2021-12-27
CVEList
CVE-2021-45526: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user2021-12-26
CVE-2021-45526 (HIGH CVSS 8.8) | Certain NETGEAR devices are affecte | cvebase.io