← Back to CVE List
Vulnerability Intelligence Report

CVE-2018-21153

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.62, EX8000 before 1.0.0.114, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.40, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN3000RPv2 before 1.0.0.56, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.56, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.

No Active Exploit Signals
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:1.54%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
netgear d7800_firmware all
netgear d7800 all
netgear dm200_firmware all
netgear dm200 all
netgear ex2700_firmware all
netgear ex2700 all
netgear ex6100_firmware all
netgear ex6100 v2
netgear ex6150_firmware all
netgear ex6150 v2
netgear ex6200_firmware all
netgear ex6200 v2
netgear ex6400_firmware all
netgear ex6400 all
netgear ex7300_firmware all
netgear ex7300 all
netgear ex8000_firmware all
netgear ex8000 all
netgear r6100_firmware all
netgear r6100 all
netgear r7500_firmware all
netgear r7500 v2
netgear r7800_firmware all
netgear r7800 all
netgear r8900_firmware all
netgear r8900 all
netgear r9000_firmware all
netgear r9000 all
netgear wn2000rpt_firmware all
netgear wn2000rpt v3
netgear wn3000rp_firmware all
netgear wn3000rp v2
netgear wn3100rp_firmware all
netgear wn3100rp v2
netgear wndr4300_firmware all
netgear wndr4300 v2
netgear wndr4500_firmware all
netgear wndr4500 v3
netgear wnr2000_firmware all
netgear wnr2000 v5

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
1.543%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2020-04-20T00:00:00
Published2020-04-27T17:10:47
Last Updated2024-08-05T12:26:38

LINK COPIED TO CLIPBOARD