CVE-2021-34947

high-risk

Published 2024-05-07

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the soap_block_table file. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13055.

Do I need to act?

0.39% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

ADJACENT_NETWORK / LOW complexity

Affected Products (20)

D7800 Firmware

Ex2700 Firmware

Ex6100 Firmware

Ex6150 Firmware

Ex6200 Firmware

Ex6250 Firmware

Ex6400 Firmware

Ex6400V2 Firmware

Ex6410 Firmware

Ex6420 Firmware

Ex6500V1 Firmware

Ex7300 Firmware

Ex7300V2 Firmware

Ex7320 Firmware

Ex7700 Firmware

Ex8000 Firmware

Lbr1020 Firmware

Lbr20 Firmware

R6700Ax Firmware

R7800 Firmware

Affected Vendors

Netgear

References (4)

Third Party Advisory https://kb.netgear.com/000064044/Security-Advisory-for-Pre-Authentication-Buffer...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1116/

Third Party Advisory https://kb.netgear.com/000064044/Security-Advisory-for-Pre-Authentication-Buffer...

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1116/

/ 100

high-risk

Severity 27/34 · High

Exploitability 1/34 · Minimal

Exposure 24/34 · High