CVE-2021-45527

🗓️ 26 Dec 2021 00:58:02Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 50 Views

Certain NETGEAR devices affected by authenticated user buffer overflow, affecting multiple models

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2021-45527	26 Dec 202101:15	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed Wi-Fi router software from NETGEAR models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P, R7900P, R8300, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, RBK852 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to cause malfunctions or execute arbitrary code.	25 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-45527	26 Dec 202107:38	–	circl
CNNVD	Netgear RBR750和NETGEAR 安全漏洞	26 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-45527	26 Dec 202100:58	–	cvelist
EUVD	EUVD-2021-32293	3 Oct 202520:07	–	euvd
NVD	CVE-2021-45527	26 Dec 202101:15	–	nvd
OSV	CVE-2021-45527	26 Dec 202101:15	–	osv
Prion	Buffer overflow	26 Dec 202101:15	–	prion
RedhatCVE	CVE-2021-45527	22 May 202521:09	–	redhatcve

NVD

Node

netgear rbk752_firmwareRange<3.2.17.12

AND

netgear rbk752Match-

Node

netgear rbr750_firmwareRange<3.2.17.12

AND

netgear rbr750Match-

Node

netgear rbs750_firmwareRange<3.2.17.12

AND

netgear rbs750Match-

Node

netgear rbk852_firmwareRange<3.2.17.12

AND

netgear rbk852Match-

Node

netgear rbr850_firmwareRange<3.2.17.12

AND

netgear rbr850Match-

Node

netgear rbs850_firmwareRange<3.2.17.12

AND

netgear rbs850Match-

Node

netgear d6220_firmwareRange<1.0.0.68

AND

netgear d6220Match-

Node

netgear d6400_firmwareRange<1.0.0.102

AND

netgear d6400Match-

Node

netgear d7000v2_firmwareRange<1.0.0.66

AND

netgear d7000v2Match-

Node

netgear d8500_firmwareRange<1.0.3.58

AND

netgear d8500Match-

Node

netgear dc112a_firmwareRange<1.0.0.54

AND

netgear dc112aMatch-

Node

netgear ex7000_firmwareRange<1.0.1.94

AND

netgear ex7000Match-

Node

netgear ex7500_firmwareRange<1.0.0.72

AND

netgear ex7500Match-

Node

netgear r6250_firmwareRange<1.0.4.48

AND

netgear r6250Match-

Node

netgear r6300v2_firmwareRange<1.0.4.52

AND

netgear r6300v2Match-

Node

netgear r6400_firmwareRange<1.0.1.70

AND

netgear r6400Match-

Node

netgear r6400v2_firmwareRange<1.0.4.102

AND

netgear r6400v2Match-

Node

netgear r6700v3_firmwareRange<1.0.4.102

AND

netgear r6700v3Match-

Node

netgear r7000_firmwareRange<1.0.11.116

AND

netgear r7000Match-

Node

netgear r7100lg_firmwareRange<1.0.0.64

AND

netgear r7100lgMatch-

Node

netgear r7850_firmwareRange<1.0.5.68

AND

netgear r7850Match-

Node

netgear r7900_firmwareRange<1.0.4.30

AND

netgear r7900Match-

Node

netgear r7960p_firmwareRange<1.4.1.68

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.52

AND

netgear r8000Match-

Node

netgear rax200_firmwareRange<1.0.2.88

AND

netgear rax200Match-

Node

netgear rax75_firmwareRange<1.0.3.102

AND

netgear rax75Match-

Node

netgear rax80_firmwareRange<1.0.3.102

AND

netgear rax80Match-

Node

netgear rbs40v_firmwareRange<2.6.2.4

AND

netgear rbs40vMatch-

Node

netgear xr300_firmwareRange<1.0.3.56

AND

netgear xr300Match-

Node

netgear rs400_firmwareRange<1.5.1.80

AND

netgear rs400Match-

Node

netgear r7000p_firmwareRange<1.3.2.124

AND

netgear r7000pMatch-

Node

netgear r8000p_firmwareRange<1.4.1.68

AND

netgear r8000pMatch-

Node

netgear r8500_firmwareRange<1.0.2.144

AND

netgear r8500Match-

Node

netgear r6900p_firmwareRange<1.3.2.124

AND

netgear r6900pMatch-

Node

netgear r7900p_firmwareRange<1.4.1.68

AND

netgear r7900pMatch-

Node

netgear r8300_firmwareRange<1.0.2.144

AND

netgear r8300Match-

Source	Link
kb	www.kb.netgear.com/000064493/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0437

21 Nov 2024 06:32Current

9.5High risk

Vulners AI Score9.5

CVSS 26.5

CVSS 3.19.6 - 9.8

EPSS0.01241

cve-2021-45527 netgear buffer overflow authenticated user security vulnerability.