CVE-2021-38526: Buffer Overflow
Published Aug 11, 2021
·Updated
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.
Affected Software
12 affected components
Netgear Rax35 Firmware<1.0.3.94
Netgear RAX35
Netgear Rax38 Firmware<1.0.3.94
Netgear RAX38
Netgear Rax40 Firmware<1.0.3.94
Netgear RAX40
All of the following
Netgear Rax35 Firmware<1.0.3.94
Netgear RAX35
All of the following
Netgear Rax38 Firmware<1.0.3.94
Netgear RAX38
All of the following
Netgear Rax40 Firmware<1.0.3.94
Netgear RAX40
Event History
Aug 11, 2021
CVE Published
via MITRE·12:01 AM
Data Sourced
via MITRE·12:01 AM
DescriptionSeverity
Data Sourced
via NVD·12:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which NETGEAR devices are affected by CVE-2021-38526?
RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94 are affected.
2
What is the severity of CVE-2021-38526?
The severity of CVE-2021-38526 is rated as high (7.5).
3
How does CVE-2021-38526 affect NETGEAR devices?
CVE-2021-38526 allows an unauthenticated attacker to perform a buffer overflow.
4
Is CVE-2021-38526 applicable to all versions of RAX35, RAX38, and RAX40?
No, CVE-2021-38526 affects versions before 1.0.3.94.
5
How can I fix CVE-2021-38526?
Update your NETGEAR device's firmware to version 1.0.3.94 or higher.