CVE-2021-34991

🗓️ 15 Nov 2021 15:40:16Reported by zdiType

Vulnerability in NETGEAR R6400v2 1.0.4.106_10.0.80 allows remote code execution

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the UPnP integrated software routers from NETGEAR is as follows: EX3700, EX3800, EX6120, EX6130, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7100LG, R7850, R7900P, R7960P, R8000, R8000P, R8300, R8500, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAX75, RAX80, RAXE450, RAXE500, RS400, WNDR3400v3, WNR3500Lv2, XR300. Additionally, NETGEAR routers with modems include: D6220, D6400, D7000v2, DGN2200v4. The NETGEAR AirCard DC112A is also affected. The NETGEAR cable modem CAX80 allows a hacker to execute arbitrary code.	7 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-34991	18 Nov 202112:13	–	circl
CNNVD	NETGEAR R6400v2 缓冲区错误漏洞	11 Nov 202100:00	–	cnnvd
CNVD	NETGEAR R6400v2 Buffer Overflow Vulnerability	13 Nov 202100:00	–	cnvd
Cvelist	CVE-2021-34991	15 Nov 202115:40	–	cvelist
EUVD	EUVD-2021-21638	7 Oct 202500:30	–	euvd
Malwarebytes	Update now! Netgear vulnerability patched	18 Nov 202113:34	–	malwarebytes
NVD	CVE-2021-34991	15 Nov 202116:15	–	nvd
OSV	CVE-2021-34991	15 Nov 202116:15	–	osv
Prion	Stack overflow	15 Nov 202116:15	–	prion

NVD

Vulners

Node

netgear ex3700_firmwareRange<1.0.0.94

AND

netgear ex3700Match-

Node

netgear ex3800_firmwareRange<1.0.0.94

AND

netgear ex3800Match-

Node

netgear ex6120_firmwareRange<1.0.0.66

AND

netgear ex6120Match-

Node

netgear ex6130_firmwareRange<1.0.0.66

AND

netgear ex6130Match-

Node

netgear r6400_firmwareRange<1.0.1.76

AND

netgear r6400Match-

Node

netgear r6400v2_firmwareRange<1.0.4.120

AND

netgear r6400v2Match-

Node

netgear r6700v3_firmwareRange<1.0.4.120

AND

netgear r6700v3Match-

Node

netgear r6900p_firmwareRange<1.3.3.142

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareRange<1.0.11.128

AND

netgear r7000Match-

Node

netgear r7000p_firmwareRange<1.3.3.142

AND

netgear r7000pMatch-

Node

netgear r7100lg_firmwareRange<1.0.0.72

AND

netgear r7100lgMatch-

Node

netgear r7850_firmwareRange<1.0.5.76

AND

netgear r7850Match-

Node

netgear r7900p_firmwareRange<1.4.2.84

AND

netgear r7900pMatch-

Node

netgear r7960p_firmwareRange<1.4.2.84

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.76

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.2.84

AND

netgear r8000pMatch-

Node

netgear r8300_firmwareRange<1.0.2.156

AND

netgear r8300Match-

Node

netgear r8500_firmwareRange<1.0.2.156

AND

netgear r8500Match-

Node

netgear rax15_firmwareRange<1.0.4.100

AND

netgear rax15Match-

Node

netgear rax20_firmwareRange<1.0.4.100

AND

netgear rax20Match-

Node

netgear rax200_firmwareRange<1.0.5.132

AND

netgear rax200Match-

Node

netgear rax35v2_firmwareRange<1.0.4.100

AND

netgear rax35v2Match-

Node

netgear rax38v2_firmwareRange<1.0.4.100

AND

netgear rax38v2Match-

Node

netgear rax40v2_firmwareRange<1.0.4.100

AND

netgear rax40v2Match-

Node

netgear rax42_firmwareRange<1.0.4.100

AND

netgear rax42Match-

Node

netgear rax43_firmwareRange<1.0.4.100

AND

netgear rax43Match-

Node

netgear rax45_firmwareRange<1.0.4.100

AND

netgear rax45Match-

Node

netgear rax48_firmwareRange<1.0.4.100

AND

netgear rax48Match-

Node

netgear rax50_firmwareRange<1.0.4.100

AND

netgear rax50Match-

Node

netgear rax50s_firmwareRange<1.0.4.100

AND

netgear rax50sMatch-

Node

netgear rax75_firmwareRange<1.0.5.132

AND

netgear rax75Match-

Node

netgear rax80_firmwareRange<1.0.5.132

AND

netgear rax80Match-

Node

netgear raxe450_firmwareRange<1.0.8.70

AND

netgear raxe450Match-

Node

netgear raxe500_firmwareRange<1.0.8.70

AND

netgear raxe500Match-

Node

netgear rs400_firmwareRange<1.5.1.80

AND

netgear rs400Match-

Node

netgear wndr3400v3_firmwareRange<1.0.1.42

AND

netgear wndr3400v3Match-

Node

netgear wnr3500lv2_firmwareRange<1.2.0.70

AND

netgear wnr3500lv2Match-

Node

netgear xr300_firmwareRange<1.0.3.68

AND

netgear xr300Match-

Node

netgear d6220_firmwareRange<1.0.0.76

AND

netgear d6220Match-

Node

netgear d6400_firmwareRange<1.0.0.108

AND

netgear d6400Match-

Node

netgear d7000v2_firmwareRange<1.0.0.76

AND

netgear d7000v2Match-

Node

netgear dgn2200v4_firmwareRange<1.0.0.126

AND

netgear dgn2200v4Match-

Node

netgear dc112a_firmwareRange<1.0.0.62

AND

netgear dc112aMatch-

Node

netgear cax80_firmwareRange<2.1.3.5

AND

netgear cax80Match-

[
  {
    "product": "R6400v2",
    "vendor": "NETGEAR",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.4.106_10.0.80"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1303/
kb	www.kb.netgear.com/000064361/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0168

21 Nov 2024 06:11Current

8.9High risk

Vulners AI Score8.9

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.05667