CVE-2021-45611
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.0.0.52, R6400 before 1.0.1.68, RAX200 before 1.0.3.106, WNDR3400v3 before 1.0.1.38, XR300 before 1.0.3.68, R8500 before 1.0.2.144, RAX75 before 1.0.3.106, R8300 before 1.0.2.144, and RAX80 before 1.0.3.106.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2021-12-26
- Last modified
- 2024-08-04
- Weaknesses
- CWE-120
Affected products
- Dc112a Firmware (Netgear)
- R6400 Firmware (Netgear)
- R8300 Firmware (Netgear)
- R8500 Firmware (Netgear)
- Rax200 Firmware (Netgear)
- Rax75 Firmware (Netgear)
- Rax80 Firmware (Netgear)
- Wndr3400v3 Firmware (Netgear)
- Xr300 Firmware (Netgear)
References
- https://kb.netgear.com/000064488/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0323
