Stack-based buffer overflow in NETGEAR R6400v2
Priority MEDIUM 47CWE-121Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. When parsing the uuid request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14110.
Why it matters now
EPSS 0.05714 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | R6400v2 | 1.0.4.106_10.0.80 | — | No fix listed | CNA |
- R6400v2 VendorNETGEAR Affected 1.0.4.106_10.0.80 Fixed in — No fix listed CNA
CPE configurations NVD · 88
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* | before 1.0.0.94 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* | before 1.0.0.94 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* | before 1.0.0.66 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* | before 1.0.0.66 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:* | before 1.0.1.76 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.94 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.94 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.66 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.66 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.76 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 78 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:* | before 1.0.4.120 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:* | before 1.0.4.120 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* | before 1.3.3.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* | before 1.0.11.128 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* | before 1.3.3.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:* | before 1.0.0.72 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:* | before 1.0.5.76 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:* | before 1.4.2.84 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* | before 1.4.2.84 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:* | before 1.0.4.76 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* | before 1.4.2.84 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:* | before 1.0.2.156 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:* | before 1.0.2.156 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* | before 1.0.5.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* | before 1.0.4.100 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:* | before 1.0.5.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* | before 1.0.5.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* | before 1.0.8.70 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* | before 1.0.8.70 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:* | before 1.5.1.80 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:* | before 1.0.1.42 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:* | before 1.2.0.70 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:* | before 1.0.3.68 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:* | before 1.0.0.76 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:* | before 1.0.0.108 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:* | before 1.0.0.76 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:* | before 1.0.0.126 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:* | before 1.0.0.62 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:cax80_firmware:*:*:*:*:*:*:*:* | before 2.1.3.5 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:cax80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.120 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.120 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.128 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.72 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.76 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2.84 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2.84 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.76 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.2.84 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:* Versions before 1.0.2.156 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.2.156 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.100 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* Versions before 1.0.8.70 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.8.70 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:* Versions before 1.5.1.80 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.42 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:* Versions before 1.2.0.70 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.68 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.76 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.108 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.76 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.126 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.62 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:cax80_firmware:*:*:*:*:*:*:*:* Versions before 2.1.3.5 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:cax80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-34991
- 2026-10-03 Alias added: GHSA-4fwh-3qpr-42ff
References
More NETGEAR Cax80 Firmware vulnerabilities
- TI-2022-10628 OS command injection in NETGEAR R6700v3 CVSS 3.1HIGH 8.0
- TI-2022-10623 Incorrect authorization in NETGEAR R6700v3 CVSS 3.1HIGH 8.8
- TI-2022-08475 A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1… CVSS 3.1HIGH 7.8
Sources
- CVE-2021-34991 · CVE Program
- CVE-2021-34991 · NVD
- FIRST EPSS
- GHSA-4fwh-3qpr-42ff · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences