CVE-2021-34982

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-34982
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. When parsing the strings file, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13709.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ Third Party Advisory
https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:lax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lax20:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:netgear:v6510-1fxaus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:v6510-1fxaus:-:*:*:*:*:*:*:*
History

14 Aug 2025, 01:41

Type Values Removed Values Added
First Time Netgear d7000v2 Firmware
Netgear rax35v2
Netgear r7100lg Firmware
Netgear rax50s Firmware
Netgear wnr3500lv2 Firmware
Netgear rax75 Firmware
Netgear mr80
Netgear rax48 Firmware
Netgear raxe450 Firmware
Netgear ex6120
Netgear rax38v2 Firmware
Netgear wndr3400v3
Netgear d7000v2
Netgear ms60
Netgear raxe500
Netgear rax200 Firmware
Netgear raxe450
Netgear ex3800 Firmware
Netgear ex7000
Netgear rax40v2 Firmware
Netgear rax80 Firmware
Netgear rax35v2 Firmware
Netgear ex3800
Netgear v6510-1fxaus Firmware
Netgear r8300
Netgear lax20 Firmware
Netgear ex3700 Firmware
Netgear rax45
Netgear xr300 Firmware
Netgear r7000 Firmware
Netgear r8500
Netgear r7960p
Netgear lax20
Netgear ms80 Firmware
Netgear r8000 Firmware
Netgear rax45 Firmware
Netgear rax15 Firmware
Netgear rs400 Firmware
Netgear r7960p Firmware
Netgear ex7500
Netgear rs400
Netgear r7100lg
Netgear ex6130
Netgear
Netgear r6400v2
Netgear xr300
Netgear rax40v2
Netgear rax42 Firmware
Netgear mr80 Firmware
Netgear ex3700
Netgear r7000p
Netgear r7850
Netgear d6220 Firmware
Netgear r6900p Firmware
Netgear r8300 Firmware
Netgear r7900p Firmware
Netgear rax38v2
Netgear ex6130 Firmware
Netgear r8500 Firmware
Netgear v6510-1fxaus
Netgear r6900p
Netgear ms80
Netgear ms60 Firmware
Netgear r6400v2 Firmware
Netgear ex7000 Firmware
Netgear r7850 Firmware
Netgear rax75
Netgear dc112a Firmware
Netgear rax15
Netgear r7000p Firmware
Netgear ex6120 Firmware
Netgear raxe500 Firmware
Netgear r6400
Netgear d6400 Firmware
Netgear r7900p
Netgear r6700v3 Firmware
Netgear dgn2200v4 Firmware
Netgear rax48
Netgear dgn2200v4
Netgear xr1000
Netgear mr60
Netgear rax50s
Netgear r8000p Firmware
Netgear wndr3400v3 Firmware
Netgear r8000p
Netgear xr1000 Firmware
Netgear rax80
Netgear rax200
Netgear mr60 Firmware
Netgear ex7500 Firmware
Netgear r7000
Netgear r6700v3
Netgear d6400
Netgear rax50
Netgear rax20 Firmware
Netgear r6400 Firmware
Netgear d6220
Netgear r8000
Netgear dc112a
Netgear rax42
Netgear rax50 Firmware
Netgear rax43 Firmware
Netgear rax20
Netgear wnr3500lv2
Netgear rax43
References () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ - () https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ - Third Party Advisory
CPE cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:v6510-1fxaus:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lax20:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:lax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:v6510-1fxaus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
CWE CWE-787

21 Nov 2024, 06:11

Type Values Removed Values Added
References () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 -
References () https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ - () https://www.zerodayinitiative.com/advisories/ZDI-21-1274/ -

08 May 2024, 13:15

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de ejecución remota de código de desbordamiento de búfer en la región stack de la memoria httpd de múltiples enrutadores de NETGEAR. Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en instalaciones afectadas de múltiples enrutadores NETGEAR. No se requiere autenticación para aprovechar esta vulnerabilidad. La falla específica existe dentro del servicio httpd, que escucha en el puerto TCP 80 de forma predeterminada. Al analizar el archivo de cadenas, el proceso no valida correctamente la longitud de los datos proporcionados por el usuario antes de copiarlos en un búfer basado en pila de longitud fija. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la raíz. Era ZDI-CAN-13709.

07 May 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-07 23:15

Updated : 2025-08-14 01:41

NVD link : CVE-2021-34982

Mitre link : CVE-2021-34982

CVE.ORG link : CVE-2021-34982

JSON object : View

Products Affected

netgear

  • mr80_firmware
  • lax20
  • ms60
  • r7850
  • wnr3500lv2_firmware
  • dgn2200v4_firmware
  • mr80
  • xr1000
  • r7100lg_firmware
  • r8000p_firmware
  • xr300_firmware
  • ex3800_firmware
  • r7000p
  • r6400v2
  • rax40v2_firmware
  • r8500_firmware
  • d6400_firmware
  • ms80_firmware
  • v6510-1fxaus_firmware
  • ex3700_firmware
  • r8300
  • r7850_firmware
  • rax15_firmware
  • rax15
  • r7100lg
  • rax50s
  • mr60
  • raxe450_firmware
  • rax43_firmware
  • d6220_firmware
  • r8000
  • rs400
  • d6220
  • rax38v2_firmware
  • rax45
  • rax35v2_firmware
  • dc112a_firmware
  • ex6120
  • rax42
  • rax43
  • rax48
  • r6900p
  • rax40v2
  • r7000
  • rax200
  • ex6130_firmware
  • rax38v2
  • rax20_firmware
  • rax48_firmware
  • ex6130
  • lax20_firmware
  • r8300_firmware
  • rax75_firmware
  • r6700v3
  • ms80
  • ex7500_firmware
  • rax80_firmware
  • r7900p
  • r7000_firmware
  • rax200_firmware
  • mr60_firmware
  • rax80
  • xr1000_firmware
  • ex7000
  • v6510-1fxaus
  • rax50_firmware
  • rax75
  • raxe500_firmware
  • r6400v2_firmware
  • dgn2200v4
  • ms60_firmware
  • rax50
  • r8000_firmware
  • rax45_firmware
  • ex3800
  • wndr3400v3
  • rs400_firmware
  • r7960p
  • r7000p_firmware
  • rax35v2
  • r6700v3_firmware
  • d7000v2
  • xr300
  • raxe450
  • r6900p_firmware
  • r8500
  • ex6120_firmware
  • rax20
  • dc112a
  • d6400
  • r8000p
  • r7900p_firmware
  • rax42_firmware
  • r6400
  • d7000v2_firmware
  • ex3700
  • wndr3400v3_firmware
  • ex7500
  • r7960p_firmware
  • r6400_firmware
  • rax50s_firmware
  • ex7000_firmware
  • raxe500
  • wnr3500lv2
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write