CVE-2018-21149: Buffer Overflow
First published: Mon Apr 27 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.0.54, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR D7800 | <1.0.1.34 | |
| NETGEAR D7800 Firmware | ||
| NETGEAR DM200 | <1.0.0.50 | |
| NETGEAR DM200 firmware | ||
| NETGEAR R6100 firmware | <1.0.1.22 | |
| NETGEAR R6100 firmware | ||
| NETGEAR R7500v2 firmware | <1.0.0.122 | |
| NETGEAR R7500v2 firmware | ||
| NETGEAR R7800 firmware | <1.0.2.42 | |
| NETGEAR R7800 firmware | ||
| NETGEAR R8900 firmware | <1.0.3.10 | |
| NETGEAR R8900 | ||
| NETGEAR R9000 firmware | <1.0.3.10 | |
| NETGEAR R9000 firmware | ||
| NETGEAR WNDR3700 firmware | <1.0.2.96 | |
| NETGEAR WNDR3700v4 | =v4 | |
| NETGEAR WNDR4300v2 firmware | <1.0.0.54 | |
| NETGEAR wndr4300v2 | ||
| NETGEAR wndr4300v2 | =v2 | |
| NETGEAR WNDR4500 firmware | <1.0.0.54 | |
| NETGEAR WNDR4500v3 | ||
| NETGEAR WNR2000v2 | <1.0.0.64 | |
| Netgear WNR2000v4 | =v5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-21149?
CVE-2018-21149 has a high severity rating due to the potential for a stack-based buffer overflow that could allow an authenticated user to execute arbitrary code.
How do I fix CVE-2018-21149?
To fix CVE-2018-21149, upgrade the affected NETGEAR devices to the latest firmware versions provided by NETGEAR.
Which NETGEAR devices are affected by CVE-2018-21149?
CVE-2018-21149 affects NETGEAR devices like D7800, DM200, R6100, R7500, R7800, R8900, R9000, and WNDR3700v4, among others.
Is CVE-2018-21149 a remote exploit?
No, CVE-2018-21149 requires authentication, meaning it can only be exploited by a user who has already logged into the affected device.
What type of vulnerability is CVE-2018-21149?
CVE-2018-21149 is a stack-based buffer overflow vulnerability that poses significant risks to device security.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/netgear
- canonical/netgear d7800
- canonical/netgear d7800 firmware
- canonical/netgear dm200
- canonical/netgear dm200 firmware
- canonical/netgear r6100 firmware
- canonical/netgear r7500v2 firmware
- canonical/netgear r7800 firmware
- canonical/netgear r8900 firmware
- canonical/netgear r8900
- canonical/netgear r9000 firmware
- canonical/netgear wndr3700 firmware
- canonical/netgear wndr3700v4
- version/netgear wndr3700v4/v4
- canonical/netgear wndr4300v2 firmware
- canonical/netgear wndr4300v2
- version/netgear wndr4300v2/v2
- canonical/netgear wndr4500 firmware
- canonical/netgear wndr4500v3
- canonical/netgear wnr2000v2
- canonical/netgear wnr2000v4
- version/netgear wnr2000v4/v5