Update now! Netgear vulnerability patched

Netgear has released a fix for a vulnerability on several of their product models. The affected product models include extenders, routers, air cards, and modems. The vulnerability was discovered by researchers at GRIMM, but prior to the planned disclosure date, Netgear released a patch that fixed...

Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models

Networking equipment company Netgear has released yet another round of patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Tracked as CVE-2021-34991 CVSS score: 8.8,...

CVE-2021-34991

creationtimestamp| type| source ---|---|--- 2021-11-18 12:13:14+00:00| published-proof-of-concept| https://t.me/truesecator/2341 2021-11-18 14:01:08+00:00| seen| https://t.me/thehackernews/1663 2021-11-18 14:03:28+00:00| seen| https://t.me/BlackHutEgy/778 2021-11-18 17:05:15+00:00| seen|...

CVE-2021-34991

NETGEAR R6400v2 UPnP daemon contains a pre-authentication, stack-based buffer overflow in handling the UUID header, enabling network-adjacent attackers to execute code as root via crafted requests to port 5000. Documented by ZDI-21-1303 and corroborated across multiple sources; exploitation requi...