Out-of-Bounds Read and Write Vulnerability in NETGEAR Routers
CVE-2021-38517

6.9MEDIUM

Key Information:

Vendor

Netgear
Status
R6400 Firmware
Vendor
CVE Published:
11 August 2021

What is CVE-2021-38517?

Certain NETGEAR router models are susceptible to out-of-bounds read and write operations, which could lead to unauthorized access and data leakage. Specifically, models R6400, RAX75, RAX80, and XR300 are affected prior to their respective firmware updates. Ensuring your devices are updated to the latest software versions is crucial to mitigate any risks associated with this vulnerability.

References

https://kb.netgear.com/000063772/Security-Advisory-for-Ou...
x_refsource_MISC

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.