CVE-2021-20166
HIGH EXPLOITED IN THE WILDNetgear Rax43 Firmware - Buffer Overflow
Title source: ruleDescription
Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2021-55
Scores
CVSS v3
8.8
EPSS
0.6423
EPSS Percentile
98.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
VulnCheck KEV
2022-08-19
InTheWild.io
2022-08-19
CWE
CWE-120
Status
published
Products (1)
netgear/rax43_firmware
1.0.3.96
Published
Dec 30, 2021
Tracked Since
Feb 18, 2026