Stack-Based Buffer Overflow in NETGEAR Routers
CVE-2021-45638

9.6CRITICAL

Key Information:

Vendor

Netgear
Status
D6220 Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-45638?

Several NETGEAR router models are susceptible to a stack-based buffer overflow vulnerability, which can potentially be exploited by unauthenticated attackers. This flaw allows attackers to manipulate memory, posing a significant security risk to affected devices. Users of the impacted NETGEAR routers should take immediate steps to update their firmware to the latest versions to mitigate this vulnerability. For detailed information and mitigation measures, refer to the Security Advisory provided by NETGEAR.

References

https://kb.netgear.com/000064496/Security-Advisory-for-Pr...
x_refsource_MISC

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.