Vulnerability Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, RAX200 before 1.0.5.126, RAX75 before 1.0.5.126, and RAX80 before 1.0.5.126.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R6400V2 Firmware | < 1.0.4.118 |
| Netgear | R6400V2 | - |
| Netgear | R6700V3 Firmware | < 1.0.4.118 |
| Netgear | R6700V3 | - |
| Netgear | R6900P Firmware | < 1.3.3.140 |
| Netgear | R6900P | - |
| Netgear | R7000 Firmware | < 1.0.11.126 |
| Netgear | R7000 | - |
| Netgear | R7000P Firmware | < 1.3.3.140 |
| Netgear | R7000P | - |
| Netgear | Rax200 Firmware | < 1.0.5.126 |
| Netgear | Rax200 | - |
| Netgear | Rax75 Firmware | < 1.0.5.126 |
| Netgear | Rax75 | - |
| Netgear | Rax80 Firmware | < 1.0.5.126 |
| Netgear | Rax80 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000064531/Security-Advisory-for-Post-Authentication-StackPatchVendor Advisory
- https://kb.netgear.com/000064531/Security-Advisory-for-Post-Authentication-StackPatchVendor Advisory
FAQ
What is CVE-2021-45607?
CVE-2021-45607 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1...
How severe is CVE-2021-45607?
CVE-2021-45607 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-45607?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R6400V2 Firmware, Netgear R6400V2, Netgear R6700V3 Firmware, Netgear R6700V3, Netgear R6900P Firmware.