CVE-2021-45608: Integer Overflow
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface (TCP port 20005) cannot be ruled out; however, exploitability was judged to be of "rather significant complexity" but not "impossible." The overflow is in SoftwareBusdispatchNormalEPMsgOut in the KCodes NetUSB kernel module. Affected NETGEAR devices are D7800 before 1.0.1.68, R6400v2 before 1.0.4.122, and R6700v3 before 1.0.4.122.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-45608?
CVE-2021-45608 refers to an integer overflow vulnerability affecting certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices.
What is the severity of CVE-2021-45608?
The severity of CVE-2021-45608 is rated as critical with a CVSS score of 9.8.
Which devices are affected by CVE-2021-45608?
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by CVE-2021-45608.
How can an attacker exploit CVE-2021-45608?
An unauthenticated attacker can potentially exploit CVE-2021-45608 to execute remote code from the WAN interface (TCP port 20005).
Are Netgear D7800, Netgear R6400v2, and Netgear R6700v3 vulnerable to CVE-2021-45608?
Netgear D7800 (firmware version up to 1.0.1.68), Netgear R6400v2 (firmware version up to 1.0.4.122), and Netgear R6700v3 (firmware version up to 1.0.4.122) are affected by CVE-2021-45608.