CVE-2021-45607: Buffer Overflow
First published: Sun Dec 26 2021(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, RAX200 before 1.0.5.126, RAX75 before 1.0.5.126, and RAX80 before 1.0.5.126.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NETGEAR R6400v2 firmware | <1.0.4.118 | |
| NETGEAR R6400v2 firmware | ||
| Netgear R6700 Firmware | <1.0.4.118 | |
| NETGEAR R6700v3 firmware | ||
| NETGEAR R6900P firmware | <1.3.3.140 | |
| Netgear R6900 Firmware | ||
| Netgear Nighthawk R7000 Firmware | <1.0.11.126 | |
| NETGEAR Nighthawk R7000 | ||
| NETGEAR R7000P firmware | <1.3.3.140 | |
| Netgear Routers | ||
| NETGEAR RAX200 firmware | <1.0.5.126 | |
| NETGEAR RAX200 firmware | ||
| NETGEAR RAX75 firmware | <1.0.5.126 | |
| NETGEAR RAX75 firmware | ||
| NETGEAR RAX80 Firmware | <1.0.5.126 | |
| NETGEAR RAX80 firmware | ||
| All of | ||
| NETGEAR R6400v2 firmware | <1.0.4.118 | |
| NETGEAR R6400v2 firmware | ||
| All of | ||
| Netgear R6700 Firmware | <1.0.4.118 | |
| NETGEAR R6700v3 firmware | ||
| All of | ||
| NETGEAR R6900P firmware | <1.3.3.140 | |
| Netgear R6900 Firmware | ||
| All of | ||
| Netgear Nighthawk R7000 Firmware | <1.0.11.126 | |
| NETGEAR Nighthawk R7000 | ||
| All of | ||
| NETGEAR R7000P firmware | <1.3.3.140 | |
| Netgear Routers | ||
| All of | ||
| NETGEAR RAX200 firmware | <1.0.5.126 | |
| NETGEAR RAX200 firmware | ||
| All of | ||
| NETGEAR RAX75 firmware | <1.0.5.126 | |
| NETGEAR RAX75 firmware | ||
| All of | ||
| NETGEAR RAX80 Firmware | <1.0.5.126 | |
| NETGEAR RAX80 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
How does CVE-2021-45607 affect NETGEAR devices?
CVE-2021-45607 affects certain NETGEAR devices through a stack-based buffer overflow vulnerability that can be exploited by an authenticated user.
Which NETGEAR devices are affected by CVE-2021-45607?
NETGEAR devices R6400v2, R6700v3, R6900P, R7000, R7000P, RAX200, RAX75, and RAX80 are affected by CVE-2021-45607.
What is the severity of CVE-2021-45607?
The severity of CVE-2021-45607 is high, with a severity value of 8.8.
How can an authenticated user exploit CVE-2021-45607?
An authenticated user can exploit CVE-2021-45607 by triggering a stack-based buffer overflow in the affected NETGEAR devices.
How can I fix CVE-2021-45607?
To fix CVE-2021-45607, users should update their firmware to the specified versions provided by NETGEAR in their security advisory.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/netgear
- canonical/netgear r6400v2 firmware
- canonical/netgear r6700 firmware
- canonical/netgear r6700v3 firmware
- canonical/netgear r6900p firmware
- canonical/netgear r6900 firmware
- canonical/netgear nighthawk r7000 firmware
- canonical/netgear nighthawk r7000
- canonical/netgear r7000p firmware
- canonical/netgear routers
- canonical/netgear rax200 firmware
- canonical/netgear rax75 firmware
- canonical/netgear rax80 firmware