PT-2021-7640 · NetGear+1 · R6220+3

Published 2021-09-09 · Updated 2022-01-12 · CVE-2021-45388

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions NetUSB versions (affected versions not specified)

Description The issue is related to the implementation of the oftwareBus dispatchNormalEPMsgOut() function in the KCodes NetUSB kernel module of NETGEAR Wi-Fi routers, including models R6220, R7000, and R7800. It involves a buffer copy without checking the size of the input data. Exploitation of this issue could allow a remote attacker to execute arbitrary code by connecting through the WAN interface (TCP port 20005).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2023-00637

CVE-2021-45388

Affected Products

Netusb

R6220

R7000

R7800

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-45388 · Security Note
• https://bdu.fstec.ru/vul/2023-00637 · Security Note
• https://t.me/isacarusec/4905 · Telegram Post
• https://t.me/true_secator/2511 · Telegram Post
• https://t.me/cibsecurity/35342 · Telegram Post