Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNetgear Dc112a
HWNetgearall versionsNetgear Dc112a Firmware
OSNetgear< 1.0.0.52Netgear R6400
HWNetgearall versionsNetgear R6400 Firmware
OSNetgear< 1.0.1.68Netgear R8300
HWNetgearall versionsNetgear R8300 Firmware
OSNetgear< 1.0.2.144Netgear R8500
HWNetgearall versionsNetgear R8500 Firmware
OSNetgear< 1.0.2.144Netgear Rax200
HWNetgearall versionsNetgear Rax200 Firmware
OSNetgear< 1.0.3.106Netgear Rax75
HWNetgearall versionsNetgear Rax75 Firmware
OSNetgear< 1.0.3.106Netgear Rax80
HWNetgearall versionsNetgear Rax80 Firmware
OSNetgear< 1.0.3.106Netgear Wndr3400v3
HWNetgearall versionsNetgear Wndr3400v3 Firmware
OSNetgear< 1.0.1.38Netgear Xr300
HWNetgearall versionsNetgear Xr300 Firmware
OSNetgear< 1.0.3.68
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassMemory
CWE
Related vulnerabilities
CVE-2025-28219CRITICAL9.8PL ✓same product
OS command injection w Netgear DC112A — zdalne wykonanie poleceń
CVE-2023-36187CRITICAL9.8PL ✓same product
Buffer Overflow w NETGEAR R6400v2 — zdalne wykonanie kodu bez uwierzytelnienia
CVE-2021-45527CRITICAL9.6PL ✓same product
Buffer overflow po uwierzytelnieniu w urządzeniach NETGEAR (wiele modeli)
CVE-2021-45610CRITICAL9.6PL ✓same product
Pre-authentication buffer overflow w urządzeniach NETGEAR (CVE-2021-45610)
CVE-2021-45609CRITICAL9.6PL ✓same product
NETGEAR — Pre-Authentication Buffer Overflow w routerach i modemach