CVE-2018-21199
6.8
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, and WNDR4300 before 1.0.2.98.
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.30 |
| Running on/with | Platform Versions |
|---|---|
Netgear D7800 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.22 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6100 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.24 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7500 | Version v2 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.40 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7800 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.52 |
| Running on/with | Platform Versions |
|---|---|
Netgear R9000 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.2.98 |
| Running on/with | Platform Versions |
|---|---|
Netgear Wndr4300 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.0.122 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7500 | All versions |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.