HIGH✓ PATCH🇬🇧 English

CVE-2018-21181

CVSS 7.2v3.1pub. 2020-04-28upd. 2024-11-21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.28, EX2700 before 1.0.1.32, EX6200v2 before 1.0.1.56, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.52, WN3100RPv2 before 1.0.0.42, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • Netgear D7800

    HW
    Netgear
    wszystkie wersje
  • Netgear D7800 Firmware

    OS
    Netgear
    < 1.0.1.28
  • Netgear Ex2700

    HW
    Netgear
    wszystkie wersje
  • Netgear Ex2700 Firmware

    OS
    Netgear
    < 1.0.1.32
  • Netgear Ex6200

    HW
    Netgear
    v2
  • Netgear Ex6200 Firmware

    OS
    Netgear
    < 1.0.1.56
  • Netgear R7500

    HW
    Netgear
    v2
  • Netgear R7500 Firmware

    OS
    Netgear
    < 1.0.3.24
  • Netgear R7800

    HW
    Netgear
    wszystkie wersje
  • Netgear R7800 Firmware

    OS
    Netgear
    < 1.0.2.40
  • Netgear R9000

    HW
    Netgear
    wszystkie wersje
  • Netgear R9000 Firmware

    OS
    Netgear
    < 1.0.3.6
  • Netgear Wn2000rpt

    HW
    Netgear
    v3
  • Netgear Wn2000rpt Firmware

    OS
    Netgear
    < 1.0.1.20
  • Netgear Wn3000rp

    HW
    Netgear
    v3
  • Netgear Wn3000rp Firmware

    OS
    Netgear
    < 1.0.2.52
  • Netgear Wn3100rp

    HW
    Netgear
    v2
  • Netgear Wn3100rp Firmware

    OS
    Netgear
    < 1.0.0.42
  • Netgear Wndr3700

    HW
    Netgear
    v4
  • Netgear Wndr3700 Firmware

    OS
    Netgear
    < 1.0.2.92
  • Netgear Wndr4300

    HW
    Netgear
    v2
  • Netgear Wndr4300 Firmware

    OS
    Netgear
    < 1.0.0.50< 1.0.2.94
  • Netgear Wndr4500

    HW
    Netgear
    v3
  • Netgear Wndr4500 Firmware

    OS
    Netgear
    < 1.0.0.50
  • Netgear Wnr2000

    HW
    Netgear
    v5
  • Netgear Wnr2000 Firmware

    OS
    Netgear
    < 1.0.0.62
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2017-6862CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w routerach NETGEAR WNR2000 umożliwia RCE bez uwierzytelnienia

CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia

CVE-2023-50089CRITICAL9.8PL ✓ten sam produkt

Command Injection w NETGEAR WNR2000v4 przez SOAP over HTTP

CVE-2021-45618CRITICAL9.6PL ✓ten sam produkt

NETGEAR — unauthenticated command injection w routerach i extenderach

CVE-2021-45619CRITICAL9.6PL ✓ten sam produkt

NETGEAR — command injection bez uwierzytelnienia w routerach i extenderach