CVE-2021-45573

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, AC2100 before 1.2.0.62, AC2400 before 1.2.0.62, and AC2600 before 1.2.0.62.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.3 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
mitreCNA
8.3 HIGH
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:N/S:U/UI:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
netgearr6260_firmware
𝑥
< 1.1.0.76
netgearr6800_firmware
𝑥
< 1.2.0.62
netgearr6700_firmware
𝑥
< 1.2.0.62
netgearr6900_firmware
𝑥
< 1.2.0.62
netgearr7450_firmware
𝑥
< 1.2.0.62
netgearac2100_firmware
𝑥
< 1.2.0.62
netgearac2400_firmware
𝑥
< 1.2.0.62
netgearac2600_firmware
𝑥
< 1.2.0.62
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000064095/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0081
https://kb.netgear.com/000064095/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0081