High severity · published Apr 23, 2020
CVE-2018-21163
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
7.2
CVSS
1.1%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.38, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6300v2 before 1.0.4.22, R6900P before 1.3.0.18, R7000P before 1.3.0.18, R7300DST before 1.0.0.62, R7900P before 1.3.0.10, R8000 before 1.0.4.12, R8000P before 1.3.0.10, WN2500RPv2 before 1.0.1.52, and WNDR3400v3 before 1.0.1.18.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dgn2200 Firmware · Netgear
before 1.0.0.102 · source: NVD
DF
Dgn2200b Firmware · Netgear
before 1.0.0.102 · source: NVD
EF
Ex3700 Firmware · Netgear
before 1.0.0.70 · source: NVD
EF
Ex3800 Firmware · Netgear
before 1.0.0.70 · source: NVD
EF
Ex6000 Firmware · Netgear
before 1.0.0.30 · source: NVD
EF
Ex6100 Firmware · Netgear
before 1.0.2.22 · source: NVD
EF
Ex6120 Firmware · Netgear
before 1.0.0.40 · source: NVD
EF
Ex6130 Firmware · Netgear
before 1.0.0.22 · source: NVD
EF
Ex6150 Firmware · Netgear
before 1.0.0.38 · source: NVD
EF
Ex6200 Firmware · Netgear
before 1.0.3.86 · source: NVD
EF
Ex7000 Firmware · Netgear
before 1.0.0.64 · source: NVD
RF
R6300 Firmware · Netgear
before 1.0.4.22 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-21163
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-21163
Vendor Advisory
https://kb.netgear.com/000055196/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-Gateways-and-Extenders-PSV-2017-0308
More from Dgn2200 Firmware
9.8
CVE-2017-6077
NETGEAR DGN2200 Remote Code Execution Vulnerability
9.8
CVE-2021-38516
Certain NETGEAR devices are affected by lack of access control at the function level
9.8
CVE-2019-17373
Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL
9.8
CVE-2016-5649
A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a…
8.8
CVE-2025-12944
Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the…