CRITICAL · 9.6

CVE-2021-45611

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.3...

Vulnerability Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.

CVSS Score

9.6

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearDc112A Firmware< 1.0.0.52
NetgearDc112A-
NetgearR6400 Firmware< 1.0.1.68
NetgearR6400-
NetgearR8300 Firmware< 1.0.2.144
NetgearR8300-
NetgearR8500 Firmware< 1.0.2.144
NetgearR8500-
NetgearWndr3400V3 Firmware< 1.0.1.38
NetgearWndr3400V3-
NetgearXr300 Firmware< 1.0.3.68
NetgearXr300-
NetgearRax200 Firmware< 1.0.3.106
NetgearRax200-
NetgearRax75 Firmware< 1.0.3.106
NetgearRax75-
NetgearRax80 Firmware< 1.0.3.106
NetgearRax80-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-45611?

CVE-2021-45611 is a vulnerability with a CVSS score of 9.6 (CRITICAL). Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.3...

How severe is CVE-2021-45611?

CVE-2021-45611 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-45611?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Dc112A Firmware, Netgear Dc112A, Netgear R6400 Firmware, Netgear R6400, Netgear R8300 Firmware.