Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2021-34982

Summary

A vulnerability exists in the httpd service of multiple NETGEAR routers, which can lead to remote code execution. The issue arises when the service fails to properly validate the length of user-supplied data during the parsing of the strings file. This flaw creates a stack-based buffer overflow condition. Attackers with network adjacency can exploit this vulnerability without any authentication, allowing them to execute arbitrary code with root privileges. The impacted devices listen on TCP port 80 by default, providing a pathway for exploitation.

References