CVE-2021-45528 — Classic Buffer Overflow in Netgear R6400 Firmware

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
7.2HIGHNVD
CNA8.1
EPSS
0.2%
top 61.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Netgear R6400 FirmwareNetgear R6900 FirmwareNetgear R7000 Firmware+8 more
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R6900 before 1.0.2.8, R7000 before 1.0.9.88, R7900 before 1.0.3.18, R8000 before 1.0.4.46, R7900P before 1.4.1.50, R8000P before 1.4.1.50, RAX75 before 1.0.3.88, RAX80 before 1.0.3.88, and WNR3500Lv2 before 1.2.0.62.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages11 packages

▶NVDnetgear/r7900p_firmware< 1.4.1.50
▶NVDnetgear/r8000p_firmware< 1.4.1.50
▶NVDnetgear/r6400_firmware< 1.0.1.52
▶NVDnetgear/r6900_firmware< 1.0.2.8
▶NVDnetgear/r7000_firmware< 1.0.9.88

Patches

Patch: kb.netgear.com ↗Patch: kb.netgear.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q9cx-37c3-pggp: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user↗2021-12-27
▶
CVEList
CVE-2021-45528: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user↗2021-12-26
▶
CVE-2021-45528 — Classic Buffer Overflow in Netgear | cvebase