Vulnerability Details : CVE-2021-45605
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.11.116, R6900P before 1.3.3.140, R7000P before 1.3.3.140, R7900 before 1.0.4.38, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and XR300 before 1.0.3.50.
Vulnerability category: OverflowMemory Corruption
Products affected by CVE-2021-45605
- cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-45605
0.22%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 42 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-45605
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST | |
|
6.0
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |
1.5
|
4.0
|
MITRE | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2021-45605
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-45605
-
https://kb.netgear.com/000064072/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2019-0214
Security Advisory for Post-Authentication Stack Overflow on Some Routers, PSV-2019-0214 | Answer | NETGEAR SupportPatch;Vendor Advisory
Jump to