The vulnerability of the httpd microprogramming software in NETGEAR Wi-Fi routers such as R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAX75, RAX80, RAXE450, RAXE500, RS400, WNDR3400v3, WNR3500Lv2, D6220, D6400, and wireless repealers like EX6120, EX6130, EX7500, allows a perpetrator to execute arbitrary code.

The NETGEAR router web server daemon has a buffer overflow enabling remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2021-34982	7 May 202423:15	–	attackerkb
Circl	CVE-2021-34982	6 Aug 202214:17	–	circl
CNNVD	NETGEAR 安全漏洞	29 Oct 202100:00	–	cnnvd
CVE	CVE-2021-34982	7 May 202422:54	–	cve
Cvelist	CVE-2021-34982 NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability	7 May 202422:54	–	cvelist
EUVD	EUVD-2021-21629	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34982	7 May 202423:15	–	nvd
OSV	CVE-2021-34982	7 May 202423:15	–	osv
Positive Technologies	PT-2021-4632 · NetGear · Rax45 +30	28 Oct 202100:00	–	ptsecurity
Vulnrichment	CVE-2021-34982 NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability	7 May 202422:54	–	vulnrichment

Vulners

Node

netgear rs400Range<1.5.1.80

netgear ex6120Range<1.0.0.66

netgear ex6130Range<1.0.0.66

netgear ex7500Range<1.0.1.76

netgear r6400v2Range<1.0.4.120

netgear r6700v3Range<1.0.4.120

netgear r6900pRange<1.3.3.142_hotfix

netgear r7000pRange<1.3.3.142_hotfix

netgear r7850Range<1.0.5.76

netgear r7960pRange<1.4.2.84

netgear r8000Range<1.4.2.84

netgear rax15Range<1.0.4.100

netgear rax20Range<1.0.4.100

netgear rax200Range<1.0.5.132

netgear rax35v2Range<1.0.4.100

netgear rax38v2Range<1.0.4.100

netgear rax40v2Range<1.0.4.100

netgear rax42Range<1.0.4.100

netgear rax43Range<1.0.4.100

netgear rax45Range<1.0.4.100

netgear rax48Range<1.0.4.100

netgear rax50Range<1.0.4.100

netgear rax50sRange<1.0.4.100

netgear rax75Range<1.0.5.132

netgear rax80Range<1.0.5.132

netgear raxe450Range<1.0.8.70

netgear raxe500Range<1.0.8.70

netgear r6220Range<1.0.0.76

netgear d6400Range<1.0.0.108

netgear r7000Range<1.0.11.128

netgear r7900pRange<1.4.2.84

netgear r8000pRange<1.4.2.84

netgear r6400Range<1.0.1.76

Source	Link
kb	www.kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1274/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-CAN-13709/

02 Nov 2021 00:00Current

8High risk

Vulners AI Score8

CVSS 28.3

CVSS 38.8

EPSS0.00576