VulnerabilityModified

CVE-2021-45611

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CRITICAL 9.8EPSS 1.20%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.20% probability · 66th percentile
CISA KEV: Not listed
Weakness: CWE-120
Affected: netgear/dc112a firmware · netgear/r6400 firmware · netgear/r8300 firmware · netgear/r8500 firmware · netgear/wndr3400v3 firmware · netgear/xr300 firmware · netgear/rax200 firmware · netgear/rax75 firmware · netgear/rax80 firmware
Source: cve@mitre.org

References

https://kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323Patch, Vendor Advisory
https://kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323Patch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.