Stack-Based Buffer Overflow in NETGEAR Routers
CVE-2021-45606

4.5MEDIUM

Key Information:

Vendor

Netgear
Status
R6400 Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-45606?

Certain NETGEAR devices, specifically models R6400, R7000, R7900, R7900P, and others, exhibit a stack-based buffer overflow vulnerability that can be exploited by authenticated users. This weakness may allow for unexpected application behavior and could lead to other potential security issues if not mitigated. It is important to ensure that affected routers are updated to their latest firmware versions to mitigate associated risks.

References

https://kb.netgear.com/000064498/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.