CVE-2018-21199

EUVD-2018-13717 · Published Apr 28, 2020

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, and WNDR4300 before 1.0.2.98.

Technologies

Netgear R9000Netgear Wndr4300 FirmwareNetgear R7500Netgear R9000 FirmwareNetgear R7800 FirmwareNetgear D7800 FirmwareNetgear R7500 FirmwareNetgear D7800Netgear R6100Netgear R7800Netgear Wndr4300Netgear R6100 Firmware

Weaknesses

CWE-787

CVSS scores

v3.16.8CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
v2.05.2AV:A/AC:L/Au:S/C:P/I:P/A:P

References

https://kb.netgear.com/000055150/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2593

Potentially impacted assets

See if this affects your attack surface