CVE-2021-45529

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
7.2HIGH
EPSS
0.2%
top 61.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Netgear Cbr40 FirmwareNetgear D7000v2 FirmwareNetgear D8500 Firmware+7 more
Timeline
PublishedDec 26
Latest updateDec 27

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects CBR40 before 2.3.5.12, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, R6400 before 1.0.1.70, R7000 before 1.0.11.126, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.30, R8000 before 1.0.4.52, and WNR3500Lv2 before 1.2.0.62.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:HExploitability: 1.5 | Impact: 5.3

Affected Packages10 packages

▶NVDnetgear/r7000p_firmware< 1.3.2.124
▶NVDnetgear/cbr40_firmware< 2.3.5.12
▶NVDnetgear/d8500_firmware< 1.0.3.58
▶NVDnetgear/r6400_firmware< 1.0.1.70
▶NVDnetgear/r7000_firmware< 1.0.11.126

Patches

Patch: kb.netgear.com ↗Patch: kb.netgear.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g942-mfwx-h532: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user↗2021-12-27
▶
CVEList
CVE-2021-45529: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user↗2021-12-26
▶
CVE-2021-45529 (HIGH CVSS 7.2) | Certain NETGEAR devices are affecte | cvebase.io