The vulnerability of NETGEAR Wi-Fi router microprogramming software, models AC2100, AC2400, AC2600, R6020, R6080, R6120, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, arises from the copying of buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

NETGEAR router firmware allows remote arbitrary code execution from unchecked buffer copies across multiple models.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-34979	29 Nov 202311:39	–	circl
CNNVD	NETGEAR R6260 安全漏洞	28 Oct 202100:00	–	cnnvd
CNVD	NETGEAR R6260 mini_httpd SOAP buffer overflow vulnerability	1 Nov 202100:00	–	cnvd
CVE	CVE-2021-34979	13 Jan 202221:44	–	cve
Cvelist	CVE-2021-34979	13 Jan 202221:44	–	cvelist
EUVD	EUVD-2021-21626	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34979	13 Jan 202222:15	–	nvd
OSV	CVE-2021-34979	13 Jan 202222:15	–	osv
Prion	Design/Logic Flaw	13 Jan 202222:15	–	prion
RedhatCVE	CVE-2021-34979	22 May 202518:37	–	redhatcve

Vulners

Node

netgear ac2100Range<1.2.0.88

netgear ac2400Range<1.2.0.88

netgear ac2600Range<1.2.0.88

netgear r6020Range<1.0.0.52

netgear r6080Range<1.0.0.52

netgear r6330Range<1.1.0.84

netgear r6260Range<1.1.0.84

netgear r6120Range<1.0.0.80

netgear r6350Range<1.1.0.84

netgear r6700v2Range<1.2.0.88

netgear r6800Range<1.2.0.88

netgear r6850Range<1.1.0.84

netgear r6900v2Range<1.2.0.88

netgear r7200Range<1.2.0.88

netgear r7350Range<1.2.0.88

netgear r7400Range<1.2.0.88

netgear r7450Range<1.2.0.88

Source	Link
kb	www.kb.netgear.com/000064261/Security-Advisory-for-Vertical-Privilege-Escalation-on-Some-Routers-PSV-2021-0152
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1241/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-CAN-13512/

02 Nov 2021 00:00Current

8High risk

Vulners AI Score8

CVSS 28.3

CVSS 38.8

EPSS0.01374