PT-2021-22183 · NetGear · Netgear Rax35+2

Published 2021-08-11 · Updated 2021-08-18 · CVE-2021-38526

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR RAX35 versions prior to 1.0.3.94 NETGEAR RAX38 versions prior to 1.0.3.94 NETGEAR RAX40 versions prior to 1.0.3.94

Description The issue is a buffer overflow that can be exploited by an unauthenticated attacker.

Recommendations For NETGEAR RAX35 versions prior to 1.0.3.94, update to version 1.0.3.94 or later. For NETGEAR RAX38 versions prior to 1.0.3.94, update to version 1.0.3.94 or later. For NETGEAR RAX40 versions prior to 1.0.3.94, update to version 1.0.3.94 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-38526

Affected Products

Netgear Rax35

Netgear Rax38

Netgear Rax40

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-38526 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38526 · Vendor Advisory
• https://kb.netgear.com/000063782/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0416 · Vendor Advisory
• https://t.me/cvenotify/19671 · Telegram Post
• https://t.me/cvenotify/19077 · Telegram Post
• https://t.me/cibsecurity/27124 · Telegram Post
• https://t.me/cvenotify/19063 · Telegram Post