ID
VAR-202112-2422
CVE
CVE-2021-45526
TITLE
plural NETGEAR Classic buffer overflow vulnerability in device
Trust: 0.8
DESCRIPTION
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 before 1.0.4.30, R8000 before 1.0.4.52, R7000P before 1.3.2.124, R8000P before 1.4.1.50, RAX80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88. plural NETGEAR A classic buffer overflow vulnerability exists on the device.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This affects EX6000 prior to 1.0.0.38, EX6120 prior to 1.0.0.48, EX6130 prior to 1.0.0.30, R6300v2 prior to 1.0.4.52, R6400 prior to 1.0.1.52, R7000 prior to 1.0.11.126, R7900 prior to 1.0.4.30, R8000 prior to 1.0.4.52, R7000P prior to 1.3.2.124, R8000P prior to 1.4.1.50, RAX80 prior to 1.0.3.88, R6900P prior to 1.3.2.124, R7900P prior to 1.4.1.50, and RAX75 prior to 1.0.3.88
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | netgear | model: | r6900p | scope: | lt | version: | 1.3.2.124 | Trust: 1.0 |
| vendor: | netgear | model: | r8000 | scope: | lt | version: | 1.0.4.52 | Trust: 1.0 |
| vendor: | netgear | model: | r8000p | scope: | lt | version: | 1.4.1.50 | Trust: 1.0 |
| vendor: | netgear | model: | r6300v2 | scope: | lt | version: | 1.0.4.52 | Trust: 1.0 |
| vendor: | netgear | model: | ex6000 | scope: | lt | version: | 1.0.0.38 | Trust: 1.0 |
| vendor: | netgear | model: | r6400 | scope: | lt | version: | 1.0.1.52 | Trust: 1.0 |
| vendor: | netgear | model: | r7900p | scope: | lt | version: | 1.4.1.50 | Trust: 1.0 |
| vendor: | netgear | model: | rax80 | scope: | lt | version: | 1.0.3.88 | Trust: 1.0 |
| vendor: | netgear | model: | ex6130 | scope: | lt | version: | 1.0.0.30 | Trust: 1.0 |
| vendor: | netgear | model: | r7000 | scope: | lt | version: | 1.0.11.126 | Trust: 1.0 |
| vendor: | netgear | model: | r7900 | scope: | lt | version: | 1.0.4.30 | Trust: 1.0 |
| vendor: | netgear | model: | ex6120 | scope: | lt | version: | 1.0.0.48 | Trust: 1.0 |
| vendor: | netgear | model: | rax75 | scope: | lt | version: | 1.0.3.88 | Trust: 1.0 |
| vendor: | netgear | model: | r7000p | scope: | lt | version: | 1.3.2.124 | Trust: 1.0 |
| vendor: | ネットギア | model: | r6400 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r6300v2 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | ex6120 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7900 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7000 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | ex6000 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | ex6130 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r8000 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r8000p | scope: | - | version: | - | Trust: 0.8 |
| vendor: | ネットギア | model: | r7000p | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | Classic buffer overflow (CWE-120) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | Security Advisory for Post-Authentication Buffer Overflow on Some Routers and Extenders, PSV-2019-0078 | url: | https://kb.netgear.com/000064446/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Extenders-PSV-2019-0078 | Trust: 0.8 |
| title: | Netgear NETGEAR Security vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=177090 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-45526 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2021-017284 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202112-2339 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2021-45526 | Trust: 0.1 |
REFERENCES
| url: | https://kb.netgear.com/000064446/security-advisory-for-post-authentication-buffer-overflow-on-some-routers-and-extenders-psv-2019-0078 | Trust: 1.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-45526 | Trust: 1.4 |
| url: | https://cwe.mitre.org/data/definitions/120.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | VULMON | id: | CVE-2021-45526 |
| db: | JVNDB | id: | JVNDB-2021-017284 |
| db: | CNNVD | id: | CNNVD-202112-2339 |
| db: | NVD | id: | CVE-2021-45526 |
LAST UPDATE DATE
2024-11-23T22:20:41.464000+00:00
SOURCES UPDATE DATE
| db: | VULMON | id: | CVE-2021-45526 | date: | 2022-01-07T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-017284 | date: | 2023-01-13T05:03:00 |
| db: | CNNVD | id: | CNNVD-202112-2339 | date: | 2022-01-10T00:00:00 |
| db: | NVD | id: | CVE-2021-45526 | date: | 2024-11-21T06:32:25.440 |
SOURCES RELEASE DATE
| db: | VULMON | id: | CVE-2021-45526 | date: | 2021-12-26T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-017284 | date: | 2023-01-13T00:00:00 |
| db: | CNNVD | id: | CNNVD-202112-2339 | date: | 2021-12-26T00:00:00 |
| db: | NVD | id: | CVE-2021-45526 | date: | 2021-12-26T01:15:14.157 |