CVE-2021-29068

Published: Mar 23, 2021Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before 1.0.11.106, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.26, R7850 before 1.0.5.60, R8000 before 1.0.4.58, RS400 before 1.5.0.48, R6400 before 1.0.1.62, R6700 before 1.0.2.16, R6900 before 1.0.2.16, MK60 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, CBR40 before 2.5.0.10, R8000P before 1.4.1.62, R7960P before 1.4.1.62, R7900P before 1.4.1.62, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RAX200 before 1.0.2.102, RAX45 before 1.0.2.64, RAX50 before 1.0.2.64, EX7500 before 1.0.0.68, EAX80 before 1.0.1.62, EAX20 before 1.0.0.36, RBK752 before 3.2.16.6, RBK753 before 3.2.16.6, RBK753S before 3.2.16.6, RBK754 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBK853 before 3.2.16.6, RBK854 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, R6120 before 1.0.0.70, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6850 before 1.1.0.76, R6350 before 1.1.0.76, R6330 before 1.1.0.76, D7800 before 1.0.1.58, RBK50 before 2.6.1.40, RBR50 before 2.6.1.40, RBS50 before 2.6.1.40, RBK40 before 2.6.1.36, RBR40 before 2.6.1.36, RBS40 before 2.6.1.38, RBK23 before 2.6.1.36, RBR20 before 2.6.1.38, RBS20 before 2.6.1.38, RBK12 before 2.6.1.44, RBK13 before 2.6.1.44, RBK14 before 2.6.1.44, RBK15 before 2.6.1.44, RBR10 before 2.6.1.44, RBS10 before 2.6.1.44, R6800 before 1.2.0.72, R6900v2 before 1.2.0.72, R6700v2 before 1.2.0.72, R7200 before 1.2.0.72, R7350 before 1.2.0.72, R7400 before 1.2.0.72, R7450 before 1.2.0.72, AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, R7800 before 1.0.2.74, R8900 before 1.0.5.24, R9000 before 1.0.5.24, RAX120 before 1.0.1.136, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.34, and XR300 before 1.0.3.50.

Affected (84)

Products: Netgear: R6700 Firmware, R6400 Firmware, R7000 Firmware, R6900p Firmware, R7000p Firmware, R7900 Firmware, R7850 Firmware, R8000 Firmware, Rs400 Firmware, R6900 Firmware, Mk60 Firmware, Mr60 Firmware, Ms60 Firmware, Cbr40 Firmware, R8000p Firmware, R7960p Firmware, R7900p Firmware, Rax15 Firmware, Rax20 Firmware, Rax75 Firmware, Rax80 Firmware, Rax200 Firmware, Rax45 Firmware, Rax50 Firmware, Ex7500 Firmware, Eax80 Firmware, Eax20 Firmware, Rbk752 Firmware, Rbk753 Firmware, Rbk753s Firmware, Rbk754 Firmware, Rbr750 Firmware, Rbs750 Firmware, Rbk852 Firmware, Rbk853 Firmware, Rbk854 Firmware, Rbr850 Firmware, Rbs850 Firmware, Rbk842 Firmware, Rbr840 Firmware, Rbs840 Firmware, R6120 Firmware, R6220 Firmware, R6230 Firmware, R6260 Firmware, R6850 Firmware, R6350 Firmware, R6330 Firmware, D7800 Firmware, Rbk50 Firmware, Rbr50 Firmware, Rbs50 Firmware, Rbk40 Firmware, Rbr40 Firmware, Rbs40 Firmware, Rbk23 Firmware, Rbr20 Firmware, Rbs20 Firmware, Rbk12 Firmware, Rbk13 Firmware, Rbk14 Firmware, Rbk15 Firmware, Rbr10 Firmware, Rbs10 Firmware, R6800 Firmware, R7200 Firmware, R7350 Firmware, R7400 Firmware, R7450 Firmware, Ac2100 Firmware, Ac2400 Firmware, Ac2600 Firmware, R7800 Firmware, R8900 Firmware, R9000 Firmware, Rax120 Firmware, Xr450 Firmware, Xr500 Firmware, Xr700 Firmware, Xr300 Firmware

80 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6700 Firmware	Before 1.0.4.98

Running on/with	Platform Versions
Netgear R6700	Version v3

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6400 Firmware	Before 1.0.4.98

Running on/with	Platform Versions
Netgear R6400	Version v2

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7000 Firmware	Before 1.0.11.106

Running on/with	Platform Versions
Netgear R7000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6900p Firmware	Before 1.3.2.124

Running on/with	Platform Versions
Netgear R6900p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7000p Firmware	Before 1.3.2.124

Running on/with	Platform Versions
Netgear R7000p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7900 Firmware	Before 1.0.4.26

Running on/with	Platform Versions
Netgear R7900	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7850 Firmware	Before 1.0.5.60

Running on/with	Platform Versions
Netgear R7850	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R8000 Firmware	Before 1.0.4.58

Running on/with	Platform Versions
Netgear R8000	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs400 Firmware	Before 1.5.0.48

Running on/with	Platform Versions
Netgear Rs400	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6400 Firmware	Before 1.0.1.62

Running on/with	Platform Versions
Netgear R6400	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6700 Firmware	Before 1.0.2.16

Running on/with	Platform Versions
Netgear R6700	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6900 Firmware	Before 1.0.2.16

Running on/with	Platform Versions
Netgear R6900	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mk60 Firmware	Before 1.0.5.102

Running on/with	Platform Versions
Netgear Mk60	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr60 Firmware	Before 1.0.5.102

Running on/with	Platform Versions
Netgear Mr60	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms60 Firmware	Before 1.0.5.102

Running on/with	Platform Versions
Netgear Ms60	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Cbr40 Firmware	Before 2.5.0.10

Running on/with	Platform Versions
Netgear Cbr40	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R8000p Firmware	Before 1.4.1.62

Running on/with	Platform Versions
Netgear R8000p	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7960p Firmware	Before 1.4.1.62

Running on/with	Platform Versions
Netgear R7960p	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7900p Firmware	Before 1.4.1.62

Running on/with	Platform Versions
Netgear R7900p	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax15 Firmware	Before 1.0.1.64

Running on/with	Platform Versions
Netgear Rax15	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax20 Firmware	Before 1.0.1.64

Running on/with	Platform Versions
Netgear Rax20	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax75 Firmware	Before 1.0.3.102

Running on/with	Platform Versions
Netgear Rax75	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax80 Firmware	Before 1.0.3.102

Running on/with	Platform Versions
Netgear Rax80	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax200 Firmware	Before 1.0.2.102

Running on/with	Platform Versions
Netgear Rax200	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax45 Firmware	Before 1.0.2.64

Running on/with	Platform Versions
Netgear Rax45	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	Before 1.0.2.64

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ex7500 Firmware	Before 1.0.0.68

Running on/with	Platform Versions
Netgear Ex7500	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Eax80 Firmware	Before 1.0.1.62

Running on/with	Platform Versions
Netgear Eax80	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Eax20 Firmware	Before 1.0.0.36

Running on/with	Platform Versions
Netgear Eax20	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk752 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk752	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk753 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk753	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk753s Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk753s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk754 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk754	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr750 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbr750	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs750 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbs750	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk852 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk852	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk853 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk853	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk854 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk854	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr850 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbr850	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs850 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbs850	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk842 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbk842	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr840 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbr840	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs840 Firmware	Before 3.2.16.6

Running on/with	Platform Versions
Netgear Rbs840	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6120 Firmware	Before 1.0.0.70

Running on/with	Platform Versions
Netgear R6120	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6220 Firmware	Before 1.0.0.70

Running on/with	Platform Versions
Netgear R6220	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6230 Firmware	Before 1.0.0.70

Running on/with	Platform Versions
Netgear R6230	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6260 Firmware	Before 1.1.0.76

Running on/with	Platform Versions
Netgear R6260	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6850 Firmware	Before 1.1.0.76

Running on/with	Platform Versions
Netgear R6850	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6350 Firmware	Before 1.1.0.76

Running on/with	Platform Versions
Netgear R6350	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6330 Firmware	Before 1.1.0.76

Running on/with	Platform Versions
Netgear R6330	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear D7800 Firmware	Before 1.0.1.58

Running on/with	Platform Versions
Netgear D7800	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk50 Firmware	Before 2.6.1.40

Running on/with	Platform Versions
Netgear Rbk50	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr50 Firmware	Before 2.6.1.40

Running on/with	Platform Versions
Netgear Rbr50	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs50 Firmware	Before 2.6.1.40

Running on/with	Platform Versions
Netgear Rbs50	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk40 Firmware	Before 2.6.1.36

Running on/with	Platform Versions
Netgear Rbk40	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr40 Firmware	Before 2.6.1.36

Running on/with	Platform Versions
Netgear Rbr40	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs40 Firmware	Before 2.6.1.38

Running on/with	Platform Versions
Netgear Rbs40	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk23 Firmware	Before 2.6.1.36

Running on/with	Platform Versions
Netgear Rbk23	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr20 Firmware	Before 2.6.1.38

Running on/with	Platform Versions
Netgear Rbr20	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs20 Firmware	Before 2.6.1.38

Running on/with	Platform Versions
Netgear Rbs20	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk12 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbk12	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk13 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbk13	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk14 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbk14	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbk15 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbk15	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr10 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbr10	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs10 Firmware	Before 2.6.1.44

Running on/with	Platform Versions
Netgear Rbs10	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6800 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R6800	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6900 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R6900	Version v2

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6700 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R6700	Version v2

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7200 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R7200	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7350 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R7350	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7400 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R7400	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7450 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear R7450	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ac2100 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear Ac2100	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ac2400 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear Ac2400	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ac2600 Firmware	Before 1.2.0.72

Running on/with	Platform Versions
Netgear Ac2600	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7800 Firmware	Before 1.0.2.74

Running on/with	Platform Versions
Netgear R7800	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R8900 Firmware	Before 1.0.5.24

Running on/with	Platform Versions
Netgear R8900	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R9000 Firmware	Before 1.0.5.24

Running on/with	Platform Versions
Netgear R9000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax120 Firmware	Before 1.0.1.136

Running on/with	Platform Versions
Netgear Rax120	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr450 Firmware	Before 2.3.2.66

Running on/with	Platform Versions
Netgear Xr450	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr500 Firmware	Before 2.3.2.66

Running on/with	Platform Versions
Netgear Xr500	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr700 Firmware	Before 1.0.1.34

Running on/with	Platform Versions
Netgear Xr700	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr300 Firmware	Before 1.0.3.50

Running on/with	Platform Versions
Netgear Xr300	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://kb.netgear.com/000063021/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0155

Source: cve@mitre.org

Vendor Advisory

https://kb.netgear.com/000063021/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0155

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.