CVE-2021-45605
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900 before 1.0.4.38, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and XR300 before 1.0.3.50.
Affected (8)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.68 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6400 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.11.116 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.3.140 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900p | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3.3.140 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7000p | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.4.38 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7900 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax75 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.102 |
| Running on/with | Platform Versions |
|---|---|
Netgear Rax80 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.3.50 |
| Running on/with | Platform Versions |
|---|---|
Netgear Xr300 | All versions |
References (2)
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.