CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-45527

CVSS 9.6v3.1pub. 2021-12-26upd. 2024-11-21

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.66, D8500 before 1.0.3.58, DC112A before 1.0.0.54, EX7000 before 1.0.1.94, EX7500 before 1.0.0.72, R6250 before 1.0.4.48, R6300v2 before 1.0.4.52, R6400 before 1.0.1.70, R6400v2 before 1.0.4.102, R6700v3 before 1.0.4.102, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7850 before 1.0.5.68, R7900 before 1.0.4.30, R7960P before 1.4.1.68, R8000 before 1.0.4.52, RAX200 before 1.0.2.88, RBS40V before 2.6.2.4, RS400 before 1.5.1.80, XR300 before 1.0.3.56, R7000P before 1.3.2.124, R8000P before 1.4.1.68, R8500 before 1.0.2.144, RAX80 before 1.0.3.102, R6900P before 1.3.2.124, R7900P before 1.4.1.68, R8300 before 1.0.2.144, RAX75 before 1.0.3.102, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Netgear D6220

    HW
    Netgear
    wszystkie wersje

  • Netgear D6220 Firmware

    OS
    Netgear
    < 1.0.0.68

  • Netgear D6400

    HW
    Netgear
    wszystkie wersje

  • Netgear D6400 Firmware

    OS
    Netgear
    < 1.0.0.102

  • Netgear D7000v2

    HW
    Netgear
    wszystkie wersje

  • Netgear D7000v2 Firmware

    OS
    Netgear
    < 1.0.0.66

  • Netgear D8500

    HW
    Netgear
    wszystkie wersje

  • Netgear D8500 Firmware

    OS
    Netgear
    < 1.0.3.58

  • Netgear Dc112a

    HW
    Netgear
    wszystkie wersje

  • Netgear Dc112a Firmware

    OS
    Netgear
    < 1.0.0.54

  • Netgear Ex7000

    HW
    Netgear
    wszystkie wersje

  • Netgear Ex7000 Firmware

    OS
    Netgear
    < 1.0.1.94

  • Netgear Ex7500

    HW
    Netgear
    wszystkie wersje

  • Netgear Ex7500 Firmware

    OS
    Netgear
    < 1.0.0.72

  • Netgear R6250

    HW
    Netgear
    wszystkie wersje

  • Netgear R6250 Firmware

    OS
    Netgear
    < 1.0.4.48

  • Netgear R6300v2

    HW
    Netgear
    wszystkie wersje

  • Netgear R6300v2 Firmware

    OS
    Netgear
    < 1.0.4.52

  • Netgear R6400

    HW
    Netgear
    wszystkie wersje

  • Netgear R6400 Firmware

    OS
    Netgear
    < 1.0.1.70

  • Netgear R6400v2

    HW
    Netgear
    wszystkie wersje

  • Netgear R6400v2 Firmware

    OS
    Netgear
    < 1.0.4.102

  • Netgear R6700v3

    HW
    Netgear
    wszystkie wersje

  • Netgear R6700v3 Firmware

    OS
    Netgear
    < 1.0.4.102

  • Netgear R6900p

    HW
    Netgear
    wszystkie wersje

  • Netgear R6900p Firmware

    OS
    Netgear
    < 1.3.2.124

  • Netgear R7000

    HW
    Netgear
    wszystkie wersje

  • Netgear R7000 Firmware

    OS
    Netgear
    < 1.0.11.116

  • Netgear R7000p

    HW
    Netgear
    wszystkie wersje

  • Netgear R7000p Firmware

    OS
    Netgear
    < 1.3.2.124
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-28219CRITICAL9.8PL ✓ten sam produkt

OS command injection w Netgear DC112A — zdalne wykonanie poleceń

CVE-2023-49007CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w Netgear Orbi RBR750 — RCE przez sieć

CVE-2023-36187CRITICAL9.8ten sam produkt

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attac...

CVE-2023-38928CRITICAL9.8ten sam produkt

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password paramete...

CVE-2023-34563CRITICAL9.8ten sam produkt

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.