Arbitrary Code Execution Vulnerability in NETGEAR R6260 Router
CVE-2021-34980

8.8HIGH

Key Information:

Vendor

Netgear
Status
R6260
Vendor
CVE Published:
13 January 2022

What is CVE-2021-34980?

This vulnerability affects NETGEAR R6260 routers, allowing network-adjacent attackers to execute arbitrary code without authentication. The flaw exists in the setupwizard.cgi page, where the SOAP_LOGIN_TOKEN variable is improperly validated. This oversight leads to a buffer overflow, enabling attackers to run code with root privileges, thus compromising the device. Users are encouraged to review security advisories and update their router firmware to mitigate risks.

Affected Version(s)

R6260 1.1.0.78_1.0.1

References

https://www.zerodayinitiative.com/advisories/ZDI-21-1242/
x_refsource_MISC
https://kb.netgear.com/000064262/Security-Advisory-for-Ve...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

STARLabs
.