CVE-2021-27253

high-risk

Published 2021-04-14

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_bind.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12303.

Do I need to act?

0.74% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

ADJACENT_NETWORK / LOW complexity

Affected Products (20)

Br200 Firmware

Br500 Firmware

D7800 Firmware

Ex6100V2 Firmware

Ex6150 Firmware

Ex6250 Firmware

Ex6400 Firmware

Ex6400V2 Firmware

Ex6410 Firmware

Ex6420 Firmware

Ex7300 Firmware

Ex7300V2 Firmware

Ex7320 Firmware

Ex7700 Firmware

Ex8000 Firmware

Lbr20 Firmware

R7800 Firmware

R8900 Firmware

R9000 Firmware

Rbk12 Firmware

Affected Vendors

Netgear

References (4)

Patch https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-249/

Patch https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-249/

/ 100

high-risk

Severity 27/34 · High

Exploitability 2/34 · Minimal

Exposure 25/34 · High