CVE-2021-40847

🗓️ 21 Sep 2021 18:15:07Reported by [email protected]Type

Circle Parental Control Service update process allows remote code execution as root on NETGEAR routers

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2021-40847	21 Sep 202118:15	–	attackerkb
BDU FSTEC	The vulnerability of the R8000 router software allows a hacker to re-record the executable files.	18 Nov 202100:00	–	bdu_fstec
Circl	CVE-2021-40847	21 Sep 202118:19	–	circl
CISA	NETGEAR Releases Security Updates for RCE Vulnerability	21 Sep 202100:00	–	cisa
CNNVD	NETGEAR 代码注入漏洞	21 Sep 202100:00	–	cnnvd
CNVD	NETGEAR Code Injection Vulnerability	24 Sep 202100:00	–	cnvd
CVE	CVE-2021-40847	21 Sep 202117:04	–	cve
Cvelist	CVE-2021-40847	21 Sep 202117:04	–	cvelist
EUVD	EUVD-2021-28003	3 Oct 202520:07	–	euvd
Prion	Remote code execution	21 Sep 202118:15	–	prion

NVD

Node

netgear r6400v2_firmwareMatch1.0.4.106

AND

netgear r6400v2Match-

Node

netgear r6700_firmwareMatch1.0.2.16

AND

netgear r6700Match-

Node

netgear r6700v3_firmwareMatch1.0.4.106

AND

netgear r6700v3Match-

Node

netgear r6900_firmwareMatch1.0.2.16

AND

netgear r6900Match-

Node

netgear r6900p_firmwareMatch1.3.2.134

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareMatch1.0.11.123

AND

netgear r7000Match-

Node

netgear r7000p_firmwareMatch1.3.2.134

AND

netgear r7000pMatch-

Node

netgear r7850_firmwareMatch1.0.5.68

AND

netgear r7850Match-

Node

netgear r7900_firmwareMatch1.0.4.38

AND

netgear r7900Match-

Node

netgear r8000_firmwareMatch1.0.4.68

AND

netgear r8000Match-

Node

netgear rs400_firmwareMatch1.5.0.68

AND

netgear rs400Match-

Source	Link
blog	www.blog.grimm-co.com/2021/09/mama-always-told-me-not-to-trust.html
kb	www.kb.netgear.com/000064039/Security-Advisory-for-Remote-Code-Execution-on-Some-Routers-PSV-2021-0204

17 Jun 2026 04:07Current

CVSS 3.18.1

CVSS 29.3

EPSS0.10051

CWE-319