Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• netgear d3600 firmwarebefore 1.0.0.76
• netgear d6000 firmwarebefore 1.0.0.76
• netgear d6200 firmwarebefore 1.1.00.32
• netgear d7000 firmwarebefore 1.0.1.68
• netgear jr6150 firmwarebefore 1.0.1.18
• netgear pr2000 firmwarebefore 1.0.0.28
• netgear r6020 firmwarebefore 1.0.0.38
• netgear r6050 firmwarebefore 1.0.1.18
• netgear r6080 firmwarebefore 1.0.0.38
• netgear r6120 firmwarebefore 1.0.0.46
• netgear r6220 firmwarebefore 1.1.0.80
• netgear r6260 firmwarebefore 1.1.0.40
• netgear r6700 firmwarebefore 1.2.0.36
• netgear r6800 firmwarebefore 1.2.0.36
• netgear r6900 firmwarebefore 1.2.0.36
• netgear wnr2020 firmwarebefore 1.1.0.62
• netgear xr500 firmwarebefore 2.3.2.32

Other highest-scoring records for the same primary product.

• CVE-2020-35799Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
  39Monitor
• CVE-2018-21137Certain NETGEAR devices are affected by a hardcoded password.
  39Monitor
• CVE-2019-20730Certain NETGEAR devices are affected by SQL injection.
  39Monitor
• CVE-2017-18762Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
  36Monitor
• CVE-2021-45641Certain NETGEAR devices are affected by incorrect configuration of security settings.
  35Monitor
• CVE-2018-21224Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.