PT-2021-22196 · NetGear · R7000P+12

Published 2021-08-10 · Updated 2022-07-12 · CVE-2021-38539

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D8500 versions prior to 1.0.3.44 R6400v2 versions prior to 1.0.2.66 R6700 version 1.0.2.6 and earlier R6700v3 versions prior to 1.0.2.66 R6900 version 1.0.2.4 and earlier R6900P versions prior to 1.3.2.126 R7000 versions prior to 1.0.9.42 R7000P versions prior to 1.3.2.126 R7100LG versions prior to 1.0.0.50 R7300DST versions prior to 1.0.0.70 R7900 versions prior to 1.0.3.10 R8300 versions prior to 1.0.2.130 R8500 versions prior to 1.0.2.130

Description Certain NETGEAR devices are affected by privilege escalation.

Recommendations For D8500, update to version 1.0.3.44 or later. For R6400v2, update to version 1.0.2.66 or later. For R6700, update to version 1.0.2.6 or later. For R6700v3, update to version 1.0.2.66 or later. For R6900, update to version 1.0.2.4 or later. For R6900P, update to version 1.3.2.126 or later. For R7000, update to version 1.0.9.42 or later. For R7000P, update to version 1.3.2.126 or later. For R7100LG, update to version 1.0.0.50 or later. For R7300DST, update to version 1.0.0.70 or later. For R7900, update to version 1.0.3.10 or later. For R8300, update to version 1.0.2.130 or later. For R8500, update to version 1.0.2.130 or later.

Fix

Related Identifiers

CVE-2021-38539

Affected Products

D8500

R6400V2

R6700

R6700V3

R6900

R6900P

R7000

R7000P

R7100Lg

R7300Dst

R7900

R8300

R8500

References · 4

• https://kb.netgear.com/000063760/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Routers-and-Gateways-PSV-2018-0385 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38539 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38539 · Security Note
• https://t.me/cibsecurity/27122 · Telegram Post