CVE-2018-21170: Buffer Overflow
Published Apr 27, 2020
·Updated
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX2700 before 1.0.1.28, R7800 before 1.0.2.40, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.
Affected Software
10 affected components
Netgear R7800 firmware<1.0.2.40
Netgear R7800
Netgear Ex2700 Firmware<1.0.1.28
Netgear EX2700
Netgear Wn2000rpt Firmware<1.0.1.20
Netgear WN2000RPT=v3
Netgear Wn3000rp Firmware<1.0.2.50
Netgear WN3000RP=v3
Netgear Wn3100rp Firmware<1.0.0.56
Netgear WN3100RP=v2
Event History
Apr 27, 2020
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID of this stack-based buffer overflow vulnerability?
The vulnerability ID is CVE-2018-21170.
2
Which NETGEAR devices are affected by this vulnerability?
The affected devices include EX2700, R7800, WN2000RPTv3, WN3000RPv3, and WN3100RPv2.
3
What is the severity rating of CVE-2018-21170?
The severity rating of CVE-2018-21170 is high with a score of 8.8.
4
How can an attacker exploit this vulnerability?
An unauthenticated attacker can exploit this vulnerability by triggering a stack-based buffer overflow.
5
How can I protect my NETGEAR device from CVE-2018-21170?
To protect your NETGEAR device from CVE-2018-21170, make sure to update the firmware to the patched version provided by NETGEAR.