CVE-2021-27257

moderate-risk

Published 2021-03-05

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-12362.

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.5/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (20)

Br200 Firmware

Br500 Firmware

D7800 Firmware

Ex6100V2 Firmware

Ex6150V2 Firmware

Ex6250 Firmware

Ex6400 Firmware

Ex6400V2 Firmware

Ex6410 Firmware

Ex6420 Firmware

Ex7300 Firmware

Ex7300V2 Firmware

Ex7320 Firmware

Ex7700 Firmware

Ex8000 Firmware

Lbr20 Firmware

R7800 Firmware

R8900 Firmware

R9000 Firmware

Rbk12 Firmware

Affected Vendors

Netgear

References (4)

Patch https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-264/

Patch https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-264/

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 0/34 · Minimal

Exposure 25/34 · High