CVE-2021-27239

🗓️ 29 Mar 2021 21:05:29Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 62 Views

CVE-2021-27239 allows arbitrary code execution on NETGEAR R6400 and R6700 routers

Reporter	Title	Published	Views	Family All 8
CNNVD	Netgear NETGEAR R6400 and R6700 安全漏洞	29 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27239	29 Mar 202121:05	–	cvelist
EUVD	EUVD-2021-14004	7 Oct 202500:30	–	euvd
NVD	CVE-2021-27239	29 Mar 202121:15	–	nvd
OSV	CVE-2021-27239	29 Mar 202121:15	–	osv
Prion	Stack overflow	29 Mar 202121:15	–	prion
RedhatCVE	CVE-2021-27239	9 Jan 202608:53	–	redhatcve
Zero Day Initiative	NETGEAR Multiple Routers SSDP Stack-based Buffer Overflow Remote Code Execution Vulnerability	24 Feb 202100:00	–	zdi

NVD

Vulners

Node

netgear d6220_firmwareRange<1.0.0.68

AND

netgear d6220Match-

Node

netgear d6400_firmwareRange<1.0.0.102

AND

netgear d6400Match-

Node

netgear d7000_firmwareRange<1.0.0.66

AND

netgear d7000Matchv2

Node

netgear d8500_firmwareRange<1.0.3.60

AND

netgear d8500Match-

Node

netgear dc112a_firmwareRange<1.0.0.54

AND

netgear dc112aMatch-

Node

netgear ex7000_firmwareRange<1.0.1.94

AND

netgear ex7000Match-

Node

netgear ex7500_firmwareRange<1.0.0.72

AND

netgear ex7500Match-

Node

netgear r6250_firmwareRange<1.0.4.48

AND

netgear r6250Match-

Node

netgear r6300_firmwareRange<1.0.4.50

AND

netgear r6300Matchv2

Node

netgear r6400_firmwareRange<1.0.1.68

AND

netgear r6400Match-

Node

netgear r6400_firmwareRange<1.0.4.102

AND

netgear r6400Matchv2

Node

netgear r6700_firmwareRange<1.0.4.102

AND

netgear r6700Matchv3

Node

netgear r6900p_firmwareRange<1.3.2.132

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareRange<1.0.11.116

AND

netgear r7000Match-

Node

netgear r7000p_firmwareRange<1.3.2.132

AND

netgear r7000pMatch-

Node

netgear r7100lg_firmwareRange<1.0.0.64

AND

netgear r7100lgMatch-

Node

netgear r7850_firmwareRange<1.0.5.68

AND

netgear r7850Match-

Node

netgear r7900_firmwareRange<1.0.4.38

AND

netgear r7900Match-

Node

netgear r7900p_firmwareRange<1.4.1.68

AND

netgear r7900pMatch-

Node

netgear r7960p_firmwareRange<1.4.1.68

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.68

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.1.68

AND

netgear r8000pMatch-

Node

netgear r8300_firmwareRange<1.0.2.144

AND

netgear r8300Match-

Node

netgear r8500_firmwareRange<1.0.2.144

AND

netgear r8500Match-

Node

netgear rax200_firmwareRange<1.0.2.88

AND

netgear rax200Match-

Node

netgear rax75_firmwareRange<1.0.3.102

AND

netgear rax75Match-

Node

netgear rax80_firmwareRange<1.0.3.102

AND

netgear rax80Match-

Node

netgear rbr750_firmwareRange<3.2.17.12

AND

netgear rbr750Match-

Node

netgear rbr850_firmwareRange<3.2.17.12

AND

netgear rbr850Match-

Node

netgear rbs40v_firmwareRange<2.6.2.4

AND

netgear rbs40vMatch-

Node

netgear rbs750_firmwareRange<3.2.17.12

AND

netgear rbs750Match-

Node

netgear rbs850_firmwareRange<3.2.17.12

AND

netgear rbs850Match-

Node

netgear rs400_firmwareRange≤1.5.0.68

AND

netgear rs400Match-

Node

netgear wndr3400_firmwareRange<1.0.1.38

AND

netgear wndr3400Matchv3

Node

netgear wnr3500l_firmwareRange<1.2.0.66

AND

netgear wnr3500lMatchv2

Node

netgear xr300_firmwareRange<1.0.3.56

AND

netgear xr300Match-

[
  {
    "product": "Multiple Routers",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.0.4.98"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-206/
kb	www.kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432

21 Nov 2024 05:57Current

9High risk

Vulners AI Score9

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.02592

CWE-121