PT-2021-18062 · NetGear · Rax20+12
Crixer
·
Published
2021-03-23
·
Updated
2021-03-24
·
CVE-2021-29073
CVSS v3.1
8.4
High
| Vector | AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
R8000P versions prior to 1.4.1.66
MK62 versions prior to 1.0.6.110
MR60 versions prior to 1.0.6.110
MS60 versions prior to 1.0.6.110
R7960P versions prior to 1.4.1.66
R7900P versions prior to 1.4.1.66
RAX15 versions prior to 1.0.2.82
RAX20 versions prior to 1.0.2.82
RAX45 versions prior to 1.0.2.72
RAX50 versions prior to 1.0.2.72
RAX75 versions prior to 1.0.3.106
RAX80 versions prior to 1.0.3.106
RAX200 versions prior to 1.0.3.106
Description:
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
Recommendations:
For R8000P version prior to 1.4.1.66, update to version 1.4.1.66 or later.
For MK62 version prior to 1.0.6.110, update to version 1.0.6.110 or later.
For MR60 version prior to 1.0.6.110, update to version 1.0.6.110 or later.
For MS60 version prior to 1.0.6.110, update to version 1.0.6.110 or later.
For R7960P version prior to 1.4.1.66, update to version 1.4.1.66 or later.
For R7900P version prior to 1.4.1.66, update to version 1.4.1.66 or later.
For RAX15 version prior to 1.0.2.82, update to version 1.0.2.82 or later.
For RAX20 version prior to 1.0.2.82, update to version 1.0.2.82 or later.
For RAX45 version prior to 1.0.2.72, update to version 1.0.2.72 or later.
For RAX50 version prior to 1.0.2.72, update to version 1.0.2.72 or later.
For RAX75 version prior to 1.0.3.106, update to version 1.0.3.106 or later.
For RAX80 version prior to 1.0.3.106, update to version 1.0.3.106 or later.
For RAX200 version prior to 1.0.3.106, update to version 1.0.3.106 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mk62
Mr60
Ms60
R7900P
R7960P
R8000P
Rax15
Rax20
Rax200
Rax45
Rax50
Rax75
Rax80