high8.8
CVE-2021-27254
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800.
Impact
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Br200 Firmware | before 5.10.0.5 |
| Netgear | Br500 Firmware | before 5.10.0.5 |
| Netgear | D7800 Firmware | before 1.0.1.60 |
| Netgear | Ex6100v2 Firmware | before 1.0.1.98 |
| Netgear | Ex6150v2 Firmware | before 1.0.1.98 |
| Netgear | Ex6250 Firmware | before 1.0.0.134 |
| Netgear | Ex6400 Firmware | before 1.0.2.158 |
| Netgear | Ex6400v2 Firmware | before 1.0.0.134 |
| Netgear | Ex6410 Firmware | before 1.0.0.134 |
| Netgear | Ex6420 Firmware | before 1.0.0.134 |
| Netgear | Ex7300 Firmware | before 1.0.2.158 |
| Netgear | Ex7300v2 Firmware | before 1.0.0.134 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
- https://www.zerodayinitiative.com/advisories/ZDI-21-252/
- https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders
- https://www.zerodayinitiative.com/advisories/ZDI-21-252/