CVE-2021-27253

🗓️ 14 Apr 2021 15:45:58Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 47 Views

CVE-2021-27253 allows network-adjacent attackers to execute arbitrary code on NETGEAR Nighthawk R7800

Reporter	Title	Published	Views	Family All 7
CNNVD	Netgear NETGEAR 缓冲区错误漏洞	14 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-27253	14 Apr 202115:45	–	cvelist
EUVD	EUVD-2021-14018	7 Oct 202500:30	–	euvd
NVD	CVE-2021-27253	14 Apr 202116:15	–	nvd
Prion	Design/Logic Flaw	14 Apr 202116:15	–	prion
RedhatCVE	CVE-2021-27253	22 May 202521:10	–	redhatcve
Zero Day Initiative	(Pwn2Own) NETGEAR Nighthawk R7800 Heap-based Buffer Overflow Remote Code Execution Vulnerability	24 Feb 202100:00	–	zdi

NVD

Vulners

Node

netgear br200_firmwareRange<5.10.0.5

AND

netgear br200Match-

Node

netgear br500_firmwareRange<5.10.0.5

AND

netgear br500Match-

Node

netgear d7800_firmwareRange<1.0.1.60

AND

netgear d7800Match-

Node

netgear ex6100v2_firmwareRange<1.0.1.98

AND

netgear ex6100Matchv2

Node

netgear ex6150_firmwareRange<1.0.1.98

AND

netgear ex6150Matchv2

Node

netgear ex6250_firmwareRange<1.0.0.134

AND

netgear ex6250Match-

Node

netgear ex6400_firmwareRange<1.0.2.158

AND

netgear ex6400Match-

Node

netgear ex6400v2_firmwareRange<1.0.0.134

AND

netgear ex6400Matchv2

Node

netgear ex6410_firmwareRange<1.0.0.134

AND

netgear ex6410Match-

Node

netgear ex6420_firmwareRange<1.0.0.134

AND

netgear ex6420Match-

Node

netgear ex7300_firmwareRange<1.0.2.158

AND

netgear ex7300Match-

Node

netgear ex7300v2_firmwareRange<1.0.0.134

AND

netgear ex7300Matchv2

Node

netgear ex7320_firmwareRange<1.0.0.134

AND

netgear ex7320Match-

Node

netgear ex7700_firmwareRange<1.0.0.216

AND

netgear ex7700Match-

Node

netgear ex8000_firmwareRange<1.0.1.232

AND

netgear ex8000Match-

Node

netgear lbr20_firmwareRange<2.6.3.50

AND

netgear lbr20Match-

Node

netgear r7800_firmwareRange<1.0.2.80

AND

netgear r7800Match-

Node

netgear r8900_firmwareRange<1.0.5.28

AND

netgear r8900Match-

Node

netgear r9000_firmwareRange<1.0.5.28

AND

netgear r9000Match-

Node

netgear rbk12_firmwareRange<2.7.2.104

AND

netgear rbk12Match-

Node

netgear rbk13_firmwareRange<2.7.2.104

AND

netgear rbk13Match-

Node

netgear rbk14_firmwareRange<2.7.2.104

AND

netgear rbk14Match-

Node

netgear rbk15_firmwareRange<2.7.2.104

AND

netgear rbk15Match-

Node

netgear rbk20_firmwareRange<2.6.2.104

AND

netgear rbk20Match-

Node

netgear rbk23_firmwareRange<2.7.2.104

AND

netgear rbk23Match-

Node

netgear rbk40_firmwareRange<2.6.2.104

AND

netgear rbk40Match-

Node

netgear rbk43_firmwareRange<2.6.2.104

AND

netgear rbk43Match-

Node

netgear rbk43s_firmwareRange<2.6.2.104

AND

netgear rbk43sMatch-

Node

netgear rbk44_firmwareRange<2.6.2.104

AND

netgear rbk44Match-

Node

netgear rbk50_firmwareRange<2.7.2.104

AND

netgear rbk50Match-

Node

netgear rbk53_firmwareRange<2.7.2.104

AND

netgear rbk53Match-

Node

netgear rbr10_firmwareRange<2.6.2.104

AND

netgear rbr10Match-

Node

netgear rbr20_firmwareRange<2.6.2.104

AND

netgear rbr20Match-

Node

netgear rbr40_firmwareRange<2.6.2.104

AND

netgear rbr40Match-

Node

netgear rbr50_firmwareRange<2.7.2.104

AND

netgear rbr50Match-

Node

netgear rbs10_firmwareRange<2.6.2.104

AND

netgear rbs10Match-

Node

netgear rbs20_firmwareRange<2.6.2.104

AND

netgear rbs20Match-

Node

netgear rbs40_firmwareRange<2.6.2.104

AND

netgear rbs40Match-

Node

netgear rbs50_firmwareRange<2.7.2.104

AND

netgear rbs50Match-

Node

netgear rbs50y_firmwareRange<2.6.2.104

AND

netgear rbs50yMatch-

Node

netgear xr450_firmwareRange<2.3.2.114

AND

netgear xr450Match-

Node

netgear xr500_firmwareRange<2.3.2.114

AND

netgear xr500Match-

Node

netgear xr700_firmwareRange<1.0.1.38

AND

netgear xr700Match-

[
  {
    "product": "R7800",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.0.2.76"
      }
    ]
  }
]

Source	Link
kb	www.kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-249/

21 Nov 2024 05:57Current

8.8High risk

Vulners AI Score8.8

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.0074