Lucene search

China National Vulnerability DatabaseCNVD-2021-83558

HistorySep 24, 2021 - 12:00 a.m.

NETGEAR Code Injection Vulnerability

2021-09-2400:00:00

China National Vulnerability Database

www.cnvd.org.cn

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

Netgear NETGEAR is a router from Netgear, an American company. NETGEAR routers have a security vulnerability that could allow remote attackers to remotely execute code as root via a MitM attack during updates to the Circle parental control service.

CPENameOperatorVersion
netgear r6400v2 1.eq0.4.106
netgear r6700 1.eq0.2.16
netgear r6700v3 1.eq0.4.106
netgear r6900 1.eq0.2.16
netgear r6900p 1.eq3.2.134
netgear r7000 1.eq0.11.123
netgear r7000p 1.eq3.2.134
netgear r7850 1.eq0.5.68
netgear r7900 1.eq0.4.38
netgear r8000 1.eq0.4.68

Name	Operator	Version
netgear r6400v2 1.	eq	0.4.106
netgear r6700 1.	eq	0.2.16
netgear r6700v3 1.	eq	0.4.106
netgear r6900 1.	eq	0.2.16
netgear r6900p 1.	eq	3.2.134
netgear r7000 1.	eq	0.11.123
netgear r7000p 1.	eq	3.2.134
netgear r7850 1.	eq	0.5.68
netgear r7900 1.	eq	0.4.38
netgear r8000 1.	eq	0.4.68

Rows per page:

1-10 of 111

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

Related for CNVD-2021-83558