CVE-2021-40847

🗓️ 21 Sep 2021 17:04:54Reported by mitreType

The Circle Parental Control Service on NETGEAR routers is vulnerable to remote code execution due to unchecked database updates via cleartext HTT

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-40847	21 Sep 202118:19	–	circl
CISA	NETGEAR Releases Security Updates for RCE Vulnerability	21 Sep 202100:00	–	cisa
CNNVD	NETGEAR 代码注入漏洞	21 Sep 202100:00	–	cnnvd
CNVD	NETGEAR Code Injection Vulnerability	24 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-40847	21 Sep 202117:04	–	cvelist
EUVD	EUVD-2021-28003	3 Oct 202520:07	–	euvd
NVD	CVE-2021-40847	21 Sep 202118:15	–	nvd
Prion	Remote code execution	21 Sep 202118:15	–	prion
The Hacker News	High-Severity RCE Flaw Disclosed in Several Netgear Router Models	22 Sep 202103:34	–	thn
ThreatPost	Netgear SOHO Security Bug Allows RCE, Corporate Attacks	22 Sep 202119:41	–	threatpost

NVD

Node

netgear r6400v2_firmwareMatch1.0.4.106

AND

netgear r6400v2Match-

Node

netgear r6700_firmwareMatch1.0.2.16

AND

netgear r6700Match-

Node

netgear r6700v3_firmwareMatch1.0.4.106

AND

netgear r6700v3Match-

Node

netgear r6900_firmwareMatch1.0.2.16

AND

netgear r6900Match-

Node

netgear r6900p_firmwareMatch1.3.2.134

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareMatch1.0.11.123

AND

netgear r7000Match-

Node

netgear r7000p_firmwareMatch1.3.2.134

AND

netgear r7000pMatch-

Node

netgear r7850_firmwareMatch1.0.5.68

AND

netgear r7850Match-

Node

netgear r7900_firmwareMatch1.0.4.38

AND

netgear r7900Match-

Node

netgear r8000_firmwareMatch1.0.4.68

AND

netgear r8000Match-

Node

netgear rs400_firmwareMatch1.5.0.68

AND

netgear rs400Match-

Source	Link
kb	www.kb.netgear.com/000064039/Security-Advisory-for-Remote-Code-Execution-on-Some-Routers-PSV-2021-0204
blog	www.blog.grimm-co.com/2021/09/mama-always-told-me-not-to-trust.html

21 Nov 2024 06:24Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

CVSS 29.3

EPSS0.05372

CWE-319