CVE-2021-45637

HIGH

NETGEAR R6260/R6800/R6700v2/R6900v2/R7450/AC2100/AC2400/AC2600 Firmware - Unauthenticated Stack-based Buffer Overflow

Title source: llm
STIX 2.1

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, AC2100 before 1.2.0.62, AC2400 before 1.2.0.62, and AC2600 before 1.2.0.62.

References (1)

Core 1

Scores

CVSS v3 8.3
EPSS 0.0065
EPSS Percentile 71.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Details

CWE
CWE-787
Status published
Products (8)
netgear/ac2100_firmware < 1.2.0.62
netgear/ac2400_firmware < 1.2.0.62
netgear/ac2600_firmware < 1.2.0.62
netgear/r6260_firmware < 1.1.0.76
netgear/r6700v2_firmware < 1.2.0.62
netgear/r6800_firmware < 1.2.0.62
netgear/r6900v2_firmware < 1.2.0.62
netgear/r7450_firmware < 1.2.0.62
Published Dec 26, 2021
Tracked Since Feb 18, 2026