High severity · published May 7, 2024
CVE-2021-34947
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the parsing of the soap_block_table file. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-13055.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
D7800 Firmware · Netgear
before 1.0.1.64 · source: NVD
EF
Ex2700 Firmware · Netgear
before 1.0.1.66 · source: NVD
EF
Ex6100 Firmware · Netgear
before 1.0.1.106 · source: NVD
EF
Ex6150 Firmware · Netgear
before 1.0.1.106 · source: NVD
EF
Ex6200 Firmware · Netgear
before 1.0.1.86 · source: NVD
EF
Ex6250 Firmware · Netgear
before 1.0.0.146 · source: NVD
EF
Ex6400 Firmware · Netgear
before 1.0.2.164 · source: NVD
EF
Ex6400v2 Firmware · Netgear
before 1.0.0.146 · source: NVD
EF
Ex6410 Firmware · Netgear
before 1.0.0.146 · source: NVD
EF
Ex6420 Firmware · Netgear
before 1.0.0.146 · source: NVD
EF
Ex6500v1 Firmware · Netgear
before 1.0.0.146 · source: NVD
EF
Ex7300 Firmware · Netgear
before 1.0.2.164 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-34947
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-34947
Third Party Advisory
https://kb.netgear.com/000064044/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2021-0129
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1116/
More from D7800 Firmware
9.8
CVE-2016-10174
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
9.8
CVE-2021-45658
Certain NETGEAR devices are affected by server-side injection
9.8
CVE-2021-45618
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
9.8
CVE-2021-45608
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker
9.8
CVE-2021-38529
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
