1. Home
  2. CVE Database
  3. CVE-2021-45609
CRITICAL · 9.6

CVE-2021-45609

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R...

Vulnerability Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R7900 before 1.0.4.38, R8300 before 1.0.2.144, R8500 before 1.0.2.144, XR300 before 1.0.3.68, R7000P before 1.3.2.132, and R6900P before 1.3.2.132.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearD8500 Firmware< 1.0.3.58
NetgearD8500-
NetgearR6250 Firmware< 1.0.4.48
NetgearR6250-
NetgearR7000 Firmware< 1.0.11.116
NetgearR7000-
NetgearR7000P Firmware< 1.3.2.132
NetgearR7000P-
NetgearR6900P Firmware< 1.3.2.132
NetgearR6900P-
NetgearR7900 Firmware< 1.0.4.38
NetgearR7900-
NetgearR8300 Firmware< 1.0.2.144
NetgearR8300-
NetgearR8500 Firmware< 1.0.2.144
NetgearR8500-
NetgearR7100Lg Firmware< 1.0.0.64
NetgearR7100Lg-
NetgearXr300 Firmware< 1.0.3.68
NetgearXr300-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2021-45609?

CVE-2021-45609 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.58, R6250 before 1.0.4.48, R7000 before 1.0.11.116, R7100LG before 1.0.0.64, R...

How severe is CVE-2021-45609?

CVE-2021-45609 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-45609?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear D8500 Firmware, Netgear D8500, Netgear R6250 Firmware, Netgear R6250, Netgear R7000 Firmware.