NetSight
critical9.6

CVE-2021-45609

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

Impact

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7900 before 1.0.4.38, R8300 before 1.0.2.144, R8500 before 1.0.2.144, XR300 before 1.0.3.68, R7000P before 1.3.2.132, and R6900P before 1.3.2.132.

Affected products

VendorProductAffected versions
NetgearD8500 Firmware
before 1.0.3.58
NetgearR6250 Firmware
before 1.0.4.48
NetgearR7000 Firmware
before 1.0.11.116
NetgearR7000p Firmware
before 1.3.2.132
NetgearR6900p Firmware
before 1.3.2.132
NetgearR7900 Firmware
before 1.0.4.38
NetgearR8300 Firmware
before 1.0.2.144
NetgearR8500 Firmware
before 1.0.2.144
NetgearR7100lg Firmware
before 1.0.0.64
NetgearXr300 Firmware
before 1.0.3.68

Weakness classification

References