CVE-2018-21221: Buffer Overflow
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-21221?
CVE-2018-21221 is a vulnerability in certain NETGEAR devices that allows an unauthenticated attacker to trigger a buffer overflow.
Which devices are affected by CVE-2018-21221?
CVE-2018-21221 affects NETGEAR D3600 (firmware version up to 1.0.0.67), D6000 (firmware version up to 1.0.0.67), and R9000 (firmware version up to 1.0.2.52).
What is the severity of CVE-2018-21221?
CVE-2018-21221 has a severity rating of 8.8, which is classified as high.
How can an attacker exploit CVE-2018-21221?
An unauthenticated attacker can exploit CVE-2018-21221 by triggering a buffer overflow, potentially leading to remote code execution.
Is there a fix for CVE-2018-21221?
Yes, the affected NETGEAR devices can be fixed by updating to firmware versions that are not vulnerable.