The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2, NETGEAR GS728TPPv2, NETGEAR GS728TPv2, NETGEAR GS750E, NETGEAR GS752TPP, NETGEAR GS752TPv2, NETGEAR MS510TXM, and NETGEAR MS510TXUP arises due to synchronization errors when using a shared resource. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

NETGEAR router firmware flaw from shared-resource sync errors allows attacker to compromise data confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 10
CNNVD	Netgear NETGEAR 竞争条件问题漏洞	13 Sep 202100:00	–	cnnvd
CVE	CVE-2021-40867	13 Sep 202107:17	–	cve
Cvelist	CVE-2021-40867	13 Sep 202107:17	–	cvelist
EUVD	EUVD-2021-28022	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Netgear SmartSwitches	17 Sep 202100:00	–	ncsc
NVD	CVE-2021-40867	13 Sep 202108:15	–	nvd
OSV	CVE-2021-40867	13 Sep 202108:15	–	osv
Prion	Race condition	13 Sep 202108:15	–	prion
Positive Technologies	PT-2021-5337 · NetGear · Gs752Tpp +16	3 Sep 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-40867	6 Feb 202504:06	–	redhatcve

Vulners

Node

netgear gc108pRange<1.0.8.2

netgear gs750eRange<1.0.1.10

netgear gs308tRange<1.0.3.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40867
gynvael	www.gynvael.coldwind.pl/
kb	www.kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145
web	www.web.nvd.nist.gov/view/vuln/detail

17 Dec 2021 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.1

CVSS 27.4

EPSS0.00162