PT-2021-22172 · NetGear · Netgear R6700V3+3

Published 2021-08-11 · Updated 2021-08-18 · CVE-2021-38515

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 versions prior to 1.0.4.98 NETGEAR R6700v3 versions prior to 1.0.4.98 NETGEAR R7900 versions prior to 1.0.3.18 NETGEAR R8000 versions prior to 1.0.4.46

Description The issue affects certain NETGEAR devices, causing a denial of service.

Recommendations For R6400v2 versions prior to 1.0.4.98, update to version 1.0.4.98 or later. For R6700v3 versions prior to 1.0.4.98, update to version 1.0.4.98 or later. For R7900 versions prior to 1.0.3.18, update to version 1.0.3.18 or later. For R8000 versions prior to 1.0.4.46, update to version 1.0.4.46 or later.

Fix

Related Identifiers

CVE-2021-38515

Affected Products

Netgear R6400V2

Netgear R6700V3

Netgear R7900

Netgear R8000

References · 6

• https://kb.netgear.com/000063768/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38515 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38515 · Vendor Advisory
• https://t.me/cvenotify/19073 · Telegram Post
• https://t.me/cvenotify/19053 · Telegram Post
• https://t.me/cibsecurity/27112 · Telegram Post