CVE-2021-34236

2022-09-0723:58:32

mitre

www.cve.org

netgear r8000

buffer overflow

remote code execution

firmware v1.0.4.56

denial of service

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to ‘/bd_genie_create_account.cgi’ with a sufficiently long parameter ‘register_country’.

References

github.com/Davidteeri/Bug-Report/blob/main/netgear-8000.md