CVE-2021-27255

🗓️ 05 Mar 2021 20:00:24Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 74 Views

CVE-2021-27255 allows remote code execution on NETGEAR R7800 firmware v1.0.2.76. No authentication needed. Vulnerability in refresh_status.aspx allows starting a service without authentication. Exploitation leads to code execution as root.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-27255	5 Mar 202122:47	–	circl
CNNVD	Netgear NETGEAR R7800 Access Control Error Vulnerability	26 Feb 202100:00	–	cnnvd
Cvelist	CVE-2021-27255	5 Mar 202120:00	–	cvelist
EUVD	EUVD-2021-14020	7 Oct 202500:30	–	euvd
NVD	CVE-2021-27255	5 Mar 202120:15	–	nvd
OSV	CVE-2021-27255	5 Mar 202120:15	–	osv
Prion	Design/Logic Flaw	5 Mar 202120:15	–	prion
RedhatCVE	CVE-2021-27255	9 Jan 202609:20	–	redhatcve
Zero Day Initiative	(Pwn2Own) NETGEAR R7800 funjsq_httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability	26 Feb 202100:00	–	zdi

NVD

Vulners

Node

netgear br200_firmwareRange<5.10.0.5

AND

netgear br200Match-

Node

netgear br500_firmwareRange<5.10.0.5

AND

netgear br500Match-

Node

netgear d7800_firmwareRange<1.0.1.60

AND

netgear d7800Match-

Node

netgear ex6100v2_firmwareRange<1.0.1.98

AND

netgear ex6100v2Match-

Node

netgear ex6150v2_firmwareRange<1.0.1.98

AND

netgear ex6150v2Match-

Node

netgear ex6250_firmwareRange<1.0.0.134

AND

netgear ex6250Match-

Node

netgear ex6400_firmwareRange<1.0.2.158

AND

netgear ex6400Match-

Node

netgear ex6400v2_firmwareRange<1.0.0.134

AND

netgear ex6400v2Match-

Node

netgear ex6410_firmwareRange<1.0.0.134

AND

netgear ex6410Match-

Node

netgear ex6420_firmwareRange<1.0.0.134

AND

netgear ex6420Match-

Node

netgear ex7300_firmwareRange<1.0.2.158

AND

netgear ex7300Match-

Node

netgear ex7300v2_firmwareRange<1.0.0.134

AND

netgear ex7300v2Match-

Node

netgear ex7320_firmwareRange<1.0.0.134

AND

netgear ex7320Match-

Node

netgear ex7700_firmwareRange<1.0.0.216

AND

netgear ex7700Match-

Node

netgear ex8000_firmwareRange<1.0.1.232

AND

netgear ex8000Match-

Node

netgear lbr20_firmwareRange<2.6.3.50

AND

netgear lbr20Match-

Node

netgear r7800_firmwareRange<1.0.2.80

AND

netgear r7800Match-

Node

netgear r8900_firmwareRange<1.0.5.28

AND

netgear r8900Match-

Node

netgear r9000_firmwareRange<1.0.5.28

AND

netgear r9000Match-

Node

netgear rbk12_firmwareRange<2.7.2.104

AND

netgear rbk12Match-

Node

netgear rbk13_firmwareRange<2.7.2.104

AND

netgear rbk13Match-

Node

netgear rbk14_firmwareRange<2.7.2.104

AND

netgear rbk14Match-

Node

netgear rbk15_firmwareRange<2.7.2.104

AND

netgear rbk15Match-

Node

netgear rbk20_firmwareRange<2.6.2.104

AND

netgear rbk20Match-

Node

netgear rbk23_firmwareRange<2.7.2.104

AND

netgear rbk23Match-

Node

netgear rbk40_firmwareRange<2.6.2.104

AND

netgear rbk40Match-

Node

netgear rbk43_firmwareRange<2.6.2.104

AND

netgear rbk43Match-

Node

netgear rbk43s_firmwareRange<2.6.2.104

AND

netgear rbk43sMatch-

Node

netgear rbk44_firmwareRange<2.6.2.104

AND

netgear rbk44Match-

Node

netgear rbk50_firmwareRange<2.7.2.104

AND

netgear rbk50Match-

Node

netgear rbk53_firmwareRange<2.7.2.104

AND

netgear rbk53Match-

Node

netgear rbr10_firmwareRange<2.6.2.104

AND

netgear rbr10Match-

Node

netgear rbr20_firmwareRange<2.6.2.104

AND

netgear rbr20Match-

Node

netgear rbr40_firmwareRange<2.6.2.104

AND

netgear rbr40Match-

Node

netgear rbr50_firmwareRange<2.7.2.104

AND

netgear rbr50Match-

Node

netgear rbs10_firmwareRange<2.6.2.104

AND

netgear rbs10Match-

Node

netgear rbs20_firmwareRange<2.6.2.104

AND

netgear rbs20Match-

Node

netgear rbs40_firmwareRange<2.6.2.104

AND

netgear rbs40Match-

Node

netgear rbs50_firmwareRange<2.7.2.104

AND

netgear rbs50Match-

Node

netgear rbs50y_firmwareRange<2.6.2.104

AND

netgear rbs50yMatch-

Node

netgear xr450_firmwareRange<2.3.2.114

AND

netgear xr450Match-

Node

netgear xr500_firmwareRange<2.3.2.114

AND

netgear xr500Match-

Node

netgear xr700_firmwareRange<1.0.1.38

AND

netgear xr700Match-

[
  {
    "product": "R7800",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.0.2.76"
      }
    ]
  }
]

Source	Link
kb	www.kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-263/

21 Nov 2024 05:57Current

9High risk

Vulners AI Score9

CVSS 28.3

CVSS 3.18.8

CVSS 36.3

EPSS0.01665

CWE-306