VulnerabilityModified
CVE-2021-38524
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
MEDIUM 4.9EPSS 0.88%
Does this matter?
Lower severity and a low EPSS score (0.88%). Track it; it rarely justifies an emergency change on its own.
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.106, RAX80 before 1.0.3.106, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, and RBS750 before 3.2.16.6.
- CVSS 3.1
- 4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- netgear/mk62 firmware · netgear/mr60 firmware · netgear/ms60 firmware · netgear/rax15 firmware · netgear/rax20 firmware · netgear/rax200 firmware · netgear/rax45 firmware · netgear/rax50 firmware · netgear/rax75 firmware · netgear/rax80 firmware · netgear/rbk752 firmware · netgear/rbr750 firmware · netgear/rbs750 firmware
- Source
- cve@mitre.org
References
- https://kb.netgear.com/000063779/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2020-0225Vendor Advisory
- https://kb.netgear.com/000063779/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2020-0225Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.