PT-2021-5948 · NetGear · R7900+35
Awxylitol
+1
·
Published
2021-12-21
·
Updated
2022-01-10
·
CVE-2021-45527
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NETGEAR D6220 versions prior to 1.0.0.68
NETGEAR D6400 versions prior to 1.0.0.102
NETGEAR D7000v2 versions prior to 1.0.0.66
NETGEAR D8500 versions prior to 1.0.3.58
NETGEAR DC112A versions prior to 1.0.0.54
NETGEAR EX7000 versions prior to 1.0.1.94
NETGEAR EX7500 versions prior to 1.0.0.72
NETGEAR R6250 versions prior to 1.0.4.48
NETGEAR R6300v2 versions prior to 1.0.4.52
NETGEAR R6400 versions prior to 1.0.1.70
NETGEAR R6400v2 versions prior to 1.0.4.102
NETGEAR R6700v3 versions prior to 1.0.4.102
NETGEAR R7000 versions prior to 1.0.11.116
NETGEAR R7100LG versions prior to 1.0.0.64
NETGEAR R7850 versions prior to 1.0.5.68
NETGEAR R7900 versions prior to 1.0.4.30
NETGEAR R7960P versions prior to 1.4.1.68
NETGEAR R8000 versions prior to 1.0.4.52
NETGEAR RAX200 versions prior to 1.0.2.88
NETGEAR RBS40V versions prior to 2.6.2.4
NETGEAR RS400 versions prior to 1.5.1.80
NETGEAR XR300 versions prior to 1.0.3.56
NETGEAR R7000P versions prior to 1.3.2.124
NETGEAR R8000P versions prior to 1.4.1.68
NETGEAR R8500 versions prior to 1.0.2.144
NETGEAR RAX80 versions prior to 1.0.3.102
NETGEAR R6900P versions prior to 1.3.2.124
NETGEAR R7900P versions prior to 1.4.1.68
NETGEAR R8300 versions prior to 1.0.2.144
NETGEAR RAX75 versions prior to 1.0.3.102
NETGEAR RBR750 versions prior to 3.2.17.12
NETGEAR RBR850 versions prior to 3.2.17.12
NETGEAR RBS750 versions prior to 3.2.17.12
NETGEAR RBS850 versions prior to 3.2.17.12
NETGEAR RBK752 versions prior to 3.2.17.12
NETGEAR RBK852 versions prior to 3.2.17.12
Description
The issue is related to a buffer overflow caused by an authenticated user, which can lead to a denial of service or the execution of arbitrary code. This occurs due to the lack of size checking for input data.
Recommendations
Update D6220 to version 1.0.0.68 or later
Update D6400 to version 1.0.0.102 or later
Update D7000v2 to version 1.0.0.66 or later
Update D8500 to version 1.0.3.58 or later
Update DC112A to version 1.0.0.54 or later
Update EX7000 to version 1.0.1.94 or later
Update EX7500 to version 1.0.0.72 or later
Update R6250 to version 1.0.4.48 or later
Update R6300v2 to version 1.0.4.52 or later
Update R6400 to version 1.0.1.70 or later
Update R6400v2 to version 1.0.4.102 or later
Update R6700v3 to version 1.0.4.102 or later
Update R7000 to version 1.0.11.116 or later
Update R7100LG to version 1.0.0.64 or later
Update R7850 to version 1.0.5.68 or later
Update R7900 to version 1.0.4.30 or later
Update R7960P to version 1.4.1.68 or later
Update R8000 to version 1.0.4.52 or later
Update RAX200 to version 1.0.2.88 or later
Update RBS40V to version 2.6.2.4 or later
Update RS400 to version 1.5.1.80 or later
Update XR300 to version 1.0.3.56 or later
Update R7000P to version 1.3.2.124 or later
Update R8000P to version 1.4.1.68 or later
Update R8500 to version 1.0.2.144 or later
Update RAX80 to version 1.0.3.102 or later
Update R6900P to version 1.3.2.124 or later
Update R7900P to version 1.4.1.68 or later
Update R8300 to version 1.0.2.144 or later
Update RAX75 to version 1.0.3.102 or later
Update RBR750 to version 3.2.17.12 or later
Update RBR850 to version 3.2.17.12 or later
Update RBS750 to version 3.2.17.12 or later
Update RBS850 to version 3.2.17.12 or later
Update RBK752 to version 3.2.17.12 or later
Update RBK852 to version 3.2.17.12 or later
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
D6220
D6400
D7000V2
D8500
Dc112A
Ex7000
Ex7500
R6250
R6300V2
R6400
R6400V2
R6700V3
R6900P
R7000
R7000P
R7100Lg
R7850
R7900
R7900P
R7960P
R8000
R8000P
R8300
R8500
Rax200
Rax75
Rax80
Rbk752
Rbk852
Rbr750
Rbr850
Rbs40V
Rbs750
Rbs850
Rs400
Xr300