Lucene search

MitreCVE-2021-45611

HistoryDec 26, 2021 - 1:15 a.m.

CVE-2021-45611

2021-12-2601:15:18

CWE-120

mitre

web.nvd.nist.gov

netgear

cve-2021-45611

buffer overflow

dc112a

r6400

rax200

wndr3400v3

xr300

r8500

rax75

r8300

rax80

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

65.6%

JSON

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.

Affected configurations

Nvd

Node

netgeardc112aMatch-

AND

netgeardc112a_firmwareRange<1.0.0.52

Node

netgearr6400Match-

AND

netgearr6400_firmwareRange<1.0.1.68

Node

netgearr8300Match-

AND

netgearr8300_firmwareRange<1.0.2.144

Node

netgearr8500Match-

AND

netgearr8500_firmwareRange<1.0.2.144

Node

netgearwndr3400v3Match-

AND

netgearwndr3400v3_firmwareRange<1.0.1.38

Node

netgearxr300Match-

AND

netgearxr300_firmwareRange<1.0.3.68

Node

netgearrax200Match-

AND

netgearrax200_firmwareRange<1.0.3.106

Node

netgearrax75Match-

AND

netgearrax75_firmwareRange<1.0.3.106

Node

netgearrax80_firmwareRange<1.0.3.106

AND

netgearrax80Match-

VendorProductVersionCPE
netgeardc112a-cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*
netgeardc112a_firmware*cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*
netgearr6400-cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*
netgearr6400_firmware*cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
netgearr8300-cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*
netgearr8300_firmware*cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
netgearr8500-cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*
netgearr8500_firmware*cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
netgearwndr3400v3-cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:*
netgearwndr3400v3_firmware*cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	dc112a	-	cpe:2.3:h:netgear:dc112a:-:::::::*
netgear	dc112a_firmware	*	cpe:2.3:o:netgear:dc112a_firmware::::::::
netgear	r6400	-	cpe:2.3:h:netgear:r6400:-:::::::*
netgear	r6400_firmware	*	cpe:2.3:o:netgear:r6400_firmware::::::::
netgear	r8300	-	cpe:2.3:h:netgear:r8300:-:::::::*
netgear	r8300_firmware	*	cpe:2.3:o:netgear:r8300_firmware::::::::
netgear	r8500	-	cpe:2.3:h:netgear:r8500:-:::::::*
netgear	r8500_firmware	*	cpe:2.3:o:netgear:r8500_firmware::::::::
netgear	wndr3400v3	-	cpe:2.3:h:netgear:wndr3400v3:-:::::::*
netgear	wndr3400v3_firmware	*	cpe:2.3:o:netgear:wndr3400v3_firmware::::::::

Rows per page:

1-10 of 181

References

kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

65.6%

JSON

Related for CVE-2021-45611