CVE-2021-38525
Severity Score
7.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.42, R6050 before 1.0.1.18, R6080 before 1.0.0.42, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.64, R6300v2 before 1.0.4.34, R6700 before 1.0.2.6, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 before 1.2.0.36, R7000 before 1.0.9.42, R7000P before 1.3.1.64, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, and XR500 before 2.3.2.40.
Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por un usuario autenticado. Esto afecta a D3600 versiones anteriores a 1.0.0.76, D6000 versiones anteriores a 1.0.0.76, D6200 versiones anteriores a 1.1.00.36, D7000 versiones anteriores a 1.0.1.70, EX6200v2 versiones anteriores a 1.0.1.78, EX7000 versiones anteriores a 1.0.1.78, EX8000 versiones anteriores a 1. 0.1.186, JR6150 versiones anteriores a 1.0.1.18, PR2000 versiones anteriores a 1.0.0.28, R6020 versiones anteriores a 1.0.0.42, R6050 versiones anteriores a 1.0.1.18, R6080 versiones anteriores a 1.0.0.42, R6120 versiones anteriores a 1.0.0.46, R6220 versiones anteriores a 1. 1.0.80, R6260 versiones anteriores a 1.1.0.64, R6300v2 versiones anteriores a 1.0.4.34, R6700 versiones anteriores a 1.0.2.6, R6700v2 versiones anteriores a 1.2.0.36, R6800 versiones anteriores a 1.2.0.36, R6900 versiones anteriores a 1.0.2.4, R6900P versiones anteriores a 1.3.1. 64, R6900v2 versiones anteriores a 1.2.0.36, R7000 versiones anteriores a 1.0.9.42, R7000P versiones anteriores a 1.3.1.64, R7800 versiones anteriores a 1.0.2.60, R8900 versiones anteriores a 1.0.4.12, R9000 versiones anteriores a 1.0.4.12 y XR500 versiones anteriores a 2.3.2.40
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-08-10 CVE Reserved
- 2021-08-11 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | D3600 Firmware Search vendor "Netgear" for product "D3600 Firmware" | < 1.0.0.76 Search vendor "Netgear" for product "D3600 Firmware" and version " < 1.0.0.76" | - |
Affected
| in | Netgear Search vendor "Netgear" | D3600 Search vendor "Netgear" for product "D3600" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D6000 Firmware Search vendor "Netgear" for product "D6000 Firmware" | < 1.0.0.76 Search vendor "Netgear" for product "D6000 Firmware" and version " < 1.0.0.76" | - |
Affected
| in | Netgear Search vendor "Netgear" | D6000 Search vendor "Netgear" for product "D6000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D6200 Firmware Search vendor "Netgear" for product "D6200 Firmware" | < 1.1.00.36 Search vendor "Netgear" for product "D6200 Firmware" and version " < 1.1.00.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | D6200 Search vendor "Netgear" for product "D6200" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | D7000 Firmware Search vendor "Netgear" for product "D7000 Firmware" | < 1.0.1.70 Search vendor "Netgear" for product "D7000 Firmware" and version " < 1.0.1.70" | - |
Affected
| in | Netgear Search vendor "Netgear" | D7000 Search vendor "Netgear" for product "D7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6200 Firmware Search vendor "Netgear" for product "Ex6200 Firmware" | < 1.0.1.78 Search vendor "Netgear" for product "Ex6200 Firmware" and version " < 1.0.1.78" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6200 Search vendor "Netgear" for product "Ex6200" | v2 Search vendor "Netgear" for product "Ex6200" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7000 Firmware Search vendor "Netgear" for product "Ex7000 Firmware" | < 1.0.1.78 Search vendor "Netgear" for product "Ex7000 Firmware" and version " < 1.0.1.78" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7000 Search vendor "Netgear" for product "Ex7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex8000 Firmware Search vendor "Netgear" for product "Ex8000 Firmware" | < 1.0.1.186 Search vendor "Netgear" for product "Ex8000 Firmware" and version " < 1.0.1.186" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex8000 Search vendor "Netgear" for product "Ex8000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Jr6150 Firmware Search vendor "Netgear" for product "Jr6150 Firmware" | < 1.0.1.18 Search vendor "Netgear" for product "Jr6150 Firmware" and version " < 1.0.1.18" | - |
Affected
| in | Netgear Search vendor "Netgear" | Jr6150 Search vendor "Netgear" for product "Jr6150" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Pr2000 Firmware Search vendor "Netgear" for product "Pr2000 Firmware" | < 1.0.0.28 Search vendor "Netgear" for product "Pr2000 Firmware" and version " < 1.0.0.28" | - |
Affected
| in | Netgear Search vendor "Netgear" | Pr2000 Search vendor "Netgear" for product "Pr2000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6020 Firmware Search vendor "Netgear" for product "R6020 Firmware" | < 1.0.0.42 Search vendor "Netgear" for product "R6020 Firmware" and version " < 1.0.0.42" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6020 Search vendor "Netgear" for product "R6020" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6050 Firmware Search vendor "Netgear" for product "R6050 Firmware" | < 1.0.1.18 Search vendor "Netgear" for product "R6050 Firmware" and version " < 1.0.1.18" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6050 Search vendor "Netgear" for product "R6050" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6080 Firmware Search vendor "Netgear" for product "R6080 Firmware" | < 1.0.0.42 Search vendor "Netgear" for product "R6080 Firmware" and version " < 1.0.0.42" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6080 Search vendor "Netgear" for product "R6080" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6120 Firmware Search vendor "Netgear" for product "R6120 Firmware" | < 1.0.0.46 Search vendor "Netgear" for product "R6120 Firmware" and version " < 1.0.0.46" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6120 Search vendor "Netgear" for product "R6120" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6220 Firmware Search vendor "Netgear" for product "R6220 Firmware" | < 1.1.0.80 Search vendor "Netgear" for product "R6220 Firmware" and version " < 1.1.0.80" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6220 Search vendor "Netgear" for product "R6220" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6260 Firmware Search vendor "Netgear" for product "R6260 Firmware" | < 1.1.0.64 Search vendor "Netgear" for product "R6260 Firmware" and version " < 1.1.0.64" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6260 Search vendor "Netgear" for product "R6260" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6300 Firmware Search vendor "Netgear" for product "R6300 Firmware" | < 1.0.4.34 Search vendor "Netgear" for product "R6300 Firmware" and version " < 1.0.4.34" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6300 Search vendor "Netgear" for product "R6300" | v2 Search vendor "Netgear" for product "R6300" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700 Firmware Search vendor "Netgear" for product "R6700 Firmware" | < 1.0.2.6 Search vendor "Netgear" for product "R6700 Firmware" and version " < 1.0.2.6" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700 Search vendor "Netgear" for product "R6700" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700 Firmware Search vendor "Netgear" for product "R6700 Firmware" | < 1.2.0.36 Search vendor "Netgear" for product "R6700 Firmware" and version " < 1.2.0.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700 Search vendor "Netgear" for product "R6700" | v2 Search vendor "Netgear" for product "R6700" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6800 Firmware Search vendor "Netgear" for product "R6800 Firmware" | < 1.2.0.36 Search vendor "Netgear" for product "R6800 Firmware" and version " < 1.2.0.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6800 Search vendor "Netgear" for product "R6800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900 Firmware Search vendor "Netgear" for product "R6900 Firmware" | < 1.0.2.4 Search vendor "Netgear" for product "R6900 Firmware" and version " < 1.0.2.4" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900 Search vendor "Netgear" for product "R6900" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900p Firmware Search vendor "Netgear" for product "R6900p Firmware" | < 1.3.1.64 Search vendor "Netgear" for product "R6900p Firmware" and version " < 1.3.1.64" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900p Search vendor "Netgear" for product "R6900p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6900 Firmware Search vendor "Netgear" for product "R6900 Firmware" | < 1.2.0.36 Search vendor "Netgear" for product "R6900 Firmware" and version " < 1.2.0.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6900 Search vendor "Netgear" for product "R6900" | v2 Search vendor "Netgear" for product "R6900" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000 Firmware Search vendor "Netgear" for product "R7000 Firmware" | < 1.0.9.42 Search vendor "Netgear" for product "R7000 Firmware" and version " < 1.0.9.42" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000 Search vendor "Netgear" for product "R7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000p Firmware Search vendor "Netgear" for product "R7000p Firmware" | < 1.3.1.64 Search vendor "Netgear" for product "R7000p Firmware" and version " < 1.3.1.64" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000p Search vendor "Netgear" for product "R7000p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7800 Firmware Search vendor "Netgear" for product "R7800 Firmware" | < 1.0.2.60 Search vendor "Netgear" for product "R7800 Firmware" and version " < 1.0.2.60" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7800 Search vendor "Netgear" for product "R7800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R8900 Firmware Search vendor "Netgear" for product "R8900 Firmware" | < 1.0.4.12 Search vendor "Netgear" for product "R8900 Firmware" and version " < 1.0.4.12" | - |
Affected
| in | Netgear Search vendor "Netgear" | R8900 Search vendor "Netgear" for product "R8900" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R9000 Firmware Search vendor "Netgear" for product "R9000 Firmware" | < 1.0.4.12 Search vendor "Netgear" for product "R9000 Firmware" and version " < 1.0.4.12" | - |
Affected
| in | Netgear Search vendor "Netgear" | R9000 Search vendor "Netgear" for product "R9000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Xr500 Firmware Search vendor "Netgear" for product "Xr500 Firmware" | < 2.3.2.40 Search vendor "Netgear" for product "Xr500 Firmware" and version " < 2.3.2.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Xr500 Search vendor "Netgear" for product "Xr500" | - | - |
Safe
|