Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• netgear d6220 firmwarebefore 1.0.0.40
• netgear d6400 firmwarebefore 1.0.0.74
• netgear d7000 firmwarebefore 1.0.1.60
• netgear d7800 firmwarebefore 1.0.1.34
• netgear d8500 firmwarebefore 1.0.3.39
• netgear dgn2200 firmwarebefore 1.0.0.94
• netgear dgn2200b firmwarebefore 1.0.0.94
• netgear ex6200 firmwarebefore 1.0.1.50
• netgear ex7000 firmwarebefore 1.0.0.56
• netgear jr6150 firmwarebefore 1.0.1.18
• netgear r6050 firmwarebefore 1.0.1.10j
• netgear r6100 firmwarebefore 1.0.1.16
• netgear r6150 firmwarebefore 1.0.1.10
• netgear r6220 firmwarebefore 1.1.0.50
• netgear r6250 firmwarebefore 1.0.4.12
• netgear r6300 firmwarebefore 1.0.4.12
• netgear r6400 firmwarebefore 1.0.1.24
• netgear r6400 firmwarebefore 1.0.2.32
• netgear r6700 firmwarebefore 1.0.1.26
• netgear r6700 firmwarebefore 1.2.0.4

Other highest-scoring records for the same primary product.

• CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before KEV
  95Now
• CVE-2021-45638Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
  39Monitor
• CVE-2021-45610Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
  39Monitor
• CVE-2021-38516Certain NETGEAR devices are affected by lack of access control at the function level.
  39Monitor
• CVE-2023-33533Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Fir
  36Monitor
• CVE-2021-45531NETGEAR D6220 devices before 1.0.0.76 are affected by command injection by an authenticated user.
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.