CVE-2018-21186: Buffer Overflow
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.
Affected Software
Event History
Frequently Asked Questions
Which NETGEAR devices are affected by the stack-based buffer overflow vulnerability (CVE-2018-21186)?
The vulnerability affects the following NETGEAR devices: D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, and WNDR4300v2 before 1.0.0.50.
What is the severity of CVE-2018-21186?
The severity of CVE-2018-21186 is medium, with a CVSS score of 6.8.
How can I fix the stack-based buffer overflow vulnerability (CVE-2018-21186)?
To fix the vulnerability, update the firmware of the affected NETGEAR devices to the latest version provided by the manufacturer.
Where can I find more information about the stack-based buffer overflow vulnerability (CVE-2018-21186)?
You can find more information about CVE-2018-21186 in the Netgear security advisory at https://kb.netgear.com/000055172/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2017-2609.
What are the Common Weakness Enumerations (CWE) associated with the stack-based buffer overflow vulnerability (CVE-2018-21186)?
The CWEs associated with CVE-2018-21186 are CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write).