CVE-2021-27251

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

0.73%

Published

Apr 14, 2021

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a insecure protocol to deliver updates. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12308.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-319

Affected Products (86)

netgear · br200_firmware (up to 5.10.0.5)vulnerable

netgear · br200

netgear · br500_firmware (up to 5.10.0.5)vulnerable

netgear · br500

netgear · d7800_firmware (up to 1.0.1.60)vulnerable

netgear · d7800

netgear · ex6100v2_firmware (up to 1.0.1.98)vulnerable

netgear · ex6100

netgear · ex6150_firmware (up to 1.0.1.98)vulnerable

netgear · ex6150

netgear · ex6250_firmware (up to 1.0.0.134)vulnerable

netgear · ex6250

netgear · ex6400_firmware (up to 1.0.2.158)vulnerable

netgear · ex6400

netgear · ex6400v2_firmware (up to 1.0.0.134)vulnerable

netgear · ex6400

netgear · ex6410_firmware (up to 1.0.0.134)vulnerable

netgear · ex6410

netgear · ex6420_firmware (up to 1.0.0.134)vulnerable

netgear · ex6420

netgear · ex7300_firmware (up to 1.0.2.158)vulnerable

netgear · ex7300

netgear · ex7300v2_firmware (up to 1.0.0.134)vulnerable

netgear · ex7300

netgear · ex7320_firmware (up to 1.0.0.134)vulnerable

netgear · ex7320

netgear · ex7700_firmware (up to 1.0.0.216)vulnerable

netgear · ex7700

netgear · ex8000_firmware (up to 1.0.1.232)vulnerable

netgear · ex8000

netgear · lbr20_firmware (up to 2.6.3.50)vulnerable

netgear · lbr20

netgear · r7800_firmware (up to 1.0.2.80)vulnerable

netgear · r7800

netgear · r8900_firmware (up to 1.0.5.28)vulnerable

netgear · r8900

netgear · r9000_firmware (up to 1.0.5.28)vulnerable

netgear · r9000

netgear · rbk12_firmware (up to 2.7.2.104)vulnerable

netgear · rbk12

netgear · rbk13_firmware (up to 2.7.2.104)vulnerable

netgear · rbk13

netgear · rbk14_firmware (up to 2.7.2.104)vulnerable

netgear · rbk14

netgear · rbk15_firmware (up to 2.7.2.104)vulnerable

netgear · rbk15

netgear · rbk20_firmware (up to 2.6.2.104)vulnerable

netgear · rbk20

netgear · rbk23_firmware (up to 2.7.2.104)vulnerable

netgear · rbk23

...and 36 more

References (4)

https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-21-247/

Third Party AdvisoryVDB Entry

https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders

PatchVendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-21-247/

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs