CVE-2018-21170

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

0.73%

Published

Apr 27, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX2700 before 1.0.1.28, R7800 before 1.0.2.40, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787

Affected Products (10)

netgear · r7800_firmware (up to 1.0.2.40)vulnerable

netgear · r7800

netgear · ex2700_firmware (up to 1.0.1.28)vulnerable

netgear · ex2700

netgear · wn2000rpt_firmware (up to 1.0.1.20)vulnerable

netgear · wn2000rpt

netgear · wn3000rp_firmware (up to 1.0.2.50)vulnerable

· wn3000rp

References (2)

https://kb.netgear.com/000055188/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Extenders-PSV-2017-2638

Vendor Advisory

https://kb.netgear.com/000055188/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Extenders-PSV-2017-2638

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs