CVE-2021-27251

HIGH

NETGEAR Router/Extender Firmware - Unauthenticated RCE via Insecure Update

Title source: llm
STIX 2.1

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a insecure protocol to deliver updates. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12308.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0029
EPSS Percentile 52.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-319
Status published
Products (43)
netgear/br200_firmware < 5.10.0.5
netgear/br500_firmware < 5.10.0.5
netgear/d7800_firmware < 1.0.1.60
netgear/ex6100v2_firmware < 1.0.1.98
netgear/ex6150_firmware < 1.0.1.98
netgear/ex6250_firmware < 1.0.0.134
netgear/ex6400_firmware < 1.0.2.158
netgear/ex6400v2_firmware < 1.0.0.134
netgear/ex6410_firmware < 1.0.0.134
netgear/ex6420_firmware < 1.0.0.134
... and 33 more
Published Apr 14, 2021
Tracked Since Feb 18, 2026