PT-2021-5886 · NetGear · Netgear R7000+7

Longuan

·

Published

2021-12-22

·

Updated

2022-01-07

·

CVE-2021-45607

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 versions prior to 1.0.4.118 NETGEAR R6700v3 versions prior to 1.0.4.118 NETGEAR R6900P versions prior to 1.3.3.140 NETGEAR R7000 versions prior to 1.0.11.126 NETGEAR R7000P versions prior to 1.3.3.140 NETGEAR RAX200 versions prior to 1.0.5.126 NETGEAR RAX75 versions prior to 1.0.5.126 NETGEAR RAX80 versions prior to 1.0.5.126
Description The issue is related to a stack-based buffer overflow that can be exploited by an authenticated user. This may allow a remote attacker to execute arbitrary code or cause a denial of service. The vulnerability is associated with the recording of data beyond the buffer in memory.
Recommendations For NETGEAR R6400v2 versions prior to 1.0.4.118, update to version 1.0.4.118 or later. For NETGEAR R6700v3 versions prior to 1.0.4.118, update to version 1.0.4.118 or later. For NETGEAR R6900P versions prior to 1.3.3.140, update to version 1.3.3.140 or later. For NETGEAR R7000 versions prior to 1.0.11.126, update to version 1.0.11.126 or later. For NETGEAR R7000P versions prior to 1.3.3.140, update to version 1.3.3.140 or later. For NETGEAR RAX200 versions prior to 1.0.5.126, update to version 1.0.5.126 or later. For NETGEAR RAX75 versions prior to 1.0.5.126, update to version 1.0.5.126 or later. For NETGEAR RAX80 versions prior to 1.0.5.126, update to version 1.0.5.126 or later.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-00401
CVE-2021-45607

Affected Products

Netgear R6400V2
Netgear R6700V3
Netgear R6900P
Netgear R7000
Netgear R7000P
Netgear Rax200
Netgear Rax75
Netgear Rax80