PT-2021-22182 · NetGear · Netgear R7800+25

Published 2021-08-11 · Updated 2021-08-19 · CVE-2021-38525

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76 NETGEAR D6200 versions prior to 1.1.00.36 NETGEAR D7000 versions prior to 1.0.1.70 NETGEAR EX6200v2 versions prior to 1.0.1.78 NETGEAR EX7000 versions prior to 1.0.1.78 NETGEAR EX8000 versions prior to 1.0.1.186 NETGEAR JR6150 versions prior to 1.0.1.18 NETGEAR PR2000 versions prior to 1.0.0.28 NETGEAR R6020 versions prior to 1.0.0.42 NETGEAR R6050 versions prior to 1.0.1.18 NETGEAR R6080 versions prior to 1.0.0.42 NETGEAR R6120 versions prior to 1.0.0.46 NETGEAR R6220 versions prior to 1.1.0.80 NETGEAR R6260 versions prior to 1.1.0.64 NETGEAR R6300v2 versions prior to 1.0.4.34 NETGEAR R6700 versions prior to 1.0.2.6 NETGEAR R6700v2 versions prior to 1.2.0.36 NETGEAR R6800 versions prior to 1.2.0.36 NETGEAR R6900 versions prior to 1.0.2.4 NETGEAR R6900P versions prior to 1.3.1.64 NETGEAR R6900v2 versions prior to 1.2.0.36 NETGEAR R7000 versions prior to 1.0.9.42 NETGEAR R7000P versions prior to 1.3.1.64 NETGEAR R7800 versions prior to 1.0.2.60 NETGEAR R8900 versions prior to 1.0.4.12 NETGEAR R9000 versions prior to 1.0.4.12 NETGEAR XR500 versions prior to 2.3.2.40

Description Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-38525

Affected Products

Netgear D3600

Netgear D6000

Netgear D6200

Netgear R7000

Netgear Ex6200V2

Netgear Ex7000

Netgear Ex8000

Netgear Jr6150

Netgear Pr2000

Netgear R6020

Netgear R6050

Netgear R6080

Netgear R6120

Netgear R6220

Netgear R6260

Netgear R6300V2

Netgear R6700

Netgear R6700V2

Netgear R6800

Netgear R6900P

Netgear R6900V2

Netgear R7000P

Netgear R7800

Netgear R8900

Netgear R9000

Netgear Xr500

References · 6

• https://kb.netgear.com/000063759/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-Gateways-and-Extenders-PSV-2018-0378 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38525 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38525 · Vendor Advisory
• https://t.me/cibsecurity/27111 · Telegram Post
• https://t.me/cvenotify/19078 · Telegram Post
• https://t.me/cvenotify/19064 · Telegram Post