CVE-2021-27254

HIGH

NETGEAR Multiple Routers and Extenders - Unauthenticated Remote Code Execution via Hard-coded Encryption Key

Title source: llm
STIX 2.1

Description

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0049
EPSS Percentile 37.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-259 CWE-798
Status published
Products (43)
netgear/br200_firmware < 5.10.0.5
netgear/br500_firmware < 5.10.0.5
netgear/d7800_firmware < 1.0.1.60
netgear/ex6100v2_firmware < 1.0.1.98
netgear/ex6150v2_firmware < 1.0.1.98
netgear/ex6250_firmware < 1.0.0.134
netgear/ex6400_firmware < 1.0.2.158
netgear/ex6400v2_firmware < 1.0.0.134
netgear/ex6410_firmware < 1.0.0.134
netgear/ex6420_firmware < 1.0.0.134
... and 33 more
Published Mar 05, 2021
Tracked Since Feb 18, 2026