What is the vulnerability ID?

The vulnerability ID is CVE-2021-45611.

Which devices are affected by this vulnerability?

This vulnerability affects DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, and R8300 devices.

What is the severity of CVE-2021-45611?

The severity of CVE-2021-45611 is critical with a severity value of 9.8.

How can an attacker exploit CVE-2021-45611?

An unauthenticated attacker can exploit CVE-2021-45611 through a buffer overflow.

How do I check if my device is vulnerable to CVE-2021-45611?

You can check if your device is vulnerable to CVE-2021-45611 by referring to the Netgear security advisory.

Vulnerability/
CVE-2021-45611

critical

9.8

CWE

120 119

26/12/2021

21/11/2024

CVE-2021-45611: Buffer Overflow

First published: Sun Dec 26 2021(Updated: )

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Netgear Dc112a Firmware	<1.0.0.52
Netgear DC112A
Netgear R6400 Firmware	<1.0.1.68
NETGEAR R6400
Netgear R8300 Firmware	<1.0.2.144
NETGEAR R8300
Netgear R8500 Firmware	<1.0.2.144
NETGEAR R8500
NETGEAR R6400v2	<1.0.1.38
NETGEAR WNDR3400v3
Netgear Xr300 Firmware	<1.0.3.68
Netgear XR300
Netgear Rax200 Firmware	<1.0.3.106
NETGEAR RAX200
Netgear Rax75 Firmware	<1.0.3.106
Netgear Rax75
Netgear Rax80 Firmware	<1.0.3.106
Netgear Rax80
All of
Netgear Dc112a Firmware	<1.0.0.52
Netgear DC112A
All of
Netgear R6400 Firmware	<1.0.1.68
NETGEAR R6400
All of
Netgear R8300 Firmware	<1.0.2.144
NETGEAR R8300
All of
Netgear R8500 Firmware	<1.0.2.144
NETGEAR R8500
All of
Netgear Wndr3400v3 Firmware	<1.0.1.38
NETGEAR WNDR3400v3
All of
Netgear Xr300 Firmware	<1.0.3.68
Netgear XR300
All of
Netgear Rax200 Firmware	<1.0.3.106
NETGEAR RAX200
All of
Netgear Rax75 Firmware	<1.0.3.106
Netgear Rax75
All of
Netgear Rax80 Firmware	<1.0.3.106
Netgear Rax80

Remedy

https://kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323

Never miss a vulnerability like this again

Reference Links

https://kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2021-45611.
Which devices are affected by this vulnerability?
This vulnerability affects DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, and R8300 devices.
What is the severity of CVE-2021-45611?
The severity of CVE-2021-45611 is critical with a severity value of 9.8.
How can an attacker exploit CVE-2021-45611?
An unauthenticated attacker can exploit CVE-2021-45611 through a buffer overflow.
How do I check if my device is vulnerable to CVE-2021-45611?
You can check if your device is vulnerable to CVE-2021-45611 by referring to the Netgear security advisory.