The vulnerability of the UPnP integrated software routers from NETGEAR is as follows: EX3700, EX3800, EX6120, EX6130, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7100LG, R7850, R7900P, R7960P, R8000, R8000P, R8300, R8500, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAX75, RAX80, RAXE450, RAXE500, RS400, WNDR3400v3, WNR3500Lv2, XR300. Additionally, NETGEAR routers with modems include: D6220, D6400, D7000v2, DGN2200v4. The NETGEAR AirCard DC112A is also affected. The NETGEAR cable modem CAX80 allows a hacker to execute arbitrary code.

🗓️ 07 Dec 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Netgear embedded routers and modems have a buffer overflow allowing remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2021-34991	15 Nov 202116:15	–	attackerkb
Circl	CVE-2021-34991	18 Nov 202112:13	–	circl
CNNVD	NETGEAR R6400v2 缓冲区错误漏洞	11 Nov 202100:00	–	cnnvd
CNVD	NETGEAR R6400v2 Buffer Overflow Vulnerability	13 Nov 202100:00	–	cnvd
CVE	CVE-2021-34991	15 Nov 202115:40	–	cve
Cvelist	CVE-2021-34991	15 Nov 202115:40	–	cvelist
EUVD	EUVD-2021-21638	7 Oct 202500:30	–	euvd
Malwarebytes	Update now! Netgear vulnerability patched	18 Nov 202113:34	–	malwarebytes
NVD	CVE-2021-34991	15 Nov 202116:15	–	nvd
OSV	CVE-2021-34991	15 Nov 202116:15	–	osv

Vulners

Node

netgear rs400Range<1.5.1.80

netgear ex6120Range<1.0.0.66

netgear ex6130Range<1.0.0.66

netgear r6400v2Range<1.0.4.120

netgear r6700v3Range<1.0.4.120

netgear r6900pRange<1.3.3.142_hotfix

netgear r7000pRange<1.3.3.142_hotfix

netgear r7850Range<1.0.5.76

netgear r7960pRange<1.4.2.84

netgear rax15Range<1.0.4.100

netgear rax20Range<1.0.4.100

netgear rax200Range<1.0.5.132

netgear rax35v2Range<1.0.4.100

netgear rax38v2Range<1.0.4.100

netgear rax40v2Range<1.0.4.100

netgear rax42Range<1.0.4.100

netgear rax43Range<1.0.4.100

netgear rax45Range<1.0.4.100

netgear rax48Range<1.0.4.100

netgear rax50Range<1.0.4.100

netgear rax50sRange<1.0.4.100

netgear rax75Range<1.0.5.132

netgear rax80Range<1.0.5.132

netgear raxe450Range<1.0.8.70

netgear raxe500Range<1.0.8.70

netgear wndr3400v3Range<1.0.1.42

netgear wnr3500lv2Range<1.2.0.70

netgear d6400Range<1.0.0.108

netgear ex3700Range<1.0.0.94

netgear ex3800Range<1.0.0.94

netgear r7000Range<1.0.11.128

netgear r7100lgRange<1.0.0.72

netgear r7900Match1.4.2.84

netgear r8000Match1.0.4.76

netgear r8300Range<1.0.2.156

netgear r8500Range<1.0.2.156

netgear xr300Range<1.0.3.68

netgear d6220Range<1.0.0.76

netgear d7000v2Range<1.0.0.76

netgear dgn2200v4Range<1.0.0.126

netgear aircards_dc112aRange<1.0.0.62

netgear cax80Range<2.1.3.5

netgear r8000pRange<1.4.2.84

netgear r6400Range<1.0.1.76

Source	Link
kb	www.kb.netgear.com/000064361/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0168
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1303/
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1303/

07 Dec 2021 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 28.3

CVSS 38.8

EPSS0.05667