← Back to CVE List
Vulnerability Intelligence Report

CVE-2021-45526

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 before 1.0.4.30, R8000 before 1.0.4.52, R7000P before 1.3.2.124, R8000P before 1.4.1.50, RAX80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88.

No Active Exploit Signals
CVSS Base Score
7.3
HIGH
Exploitability:1.5
Impact Score:5.3
EPSS Probability:0.45%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
netgear ex6000_firmware all
netgear ex6000 all
netgear ex6120_firmware all
netgear ex6120 all
netgear ex6130_firmware all
netgear ex6130 all
netgear r6300v2_firmware all
netgear r6300v2 all
netgear r6400_firmware all
netgear r6400 all
netgear r7000_firmware all
netgear r7000 all
netgear r7900_firmware all
netgear r7900 all
netgear r8000_firmware all
netgear r8000 all
netgear r8000p_firmware all
netgear r8000p all
netgear r7000p_firmware all
netgear r7000p all
netgear rax80_firmware all
netgear rax80 all
netgear rax75_firmware all
netgear rax75 all
netgear r6900p_firmware all
netgear r6900p all
netgear r7900p_firmware all
netgear r7900p all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.450%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2021-12-25T00:00:00
Published2021-12-26T00:58:14
Last Updated2024-08-04T04:39:21

LINK COPIED TO CLIPBOARD