CVE-2021-45637
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, AC2100 before 1.2.0.62, AC2400 before 1.2.0.62, and AC2600 before 1.2.0.62.
Affected (8)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.1.0.76 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6260 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6800 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6700v2 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R6900v2 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear R7450 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2100 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2400 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2.0.62 |
| Running on/with | Platform Versions |
|---|---|
Netgear Ac2600 | All versions |
References (2)
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Timeline
No history available yet.