Read the docs
TI-2021-20613 Aliases CVE-2021-45526GHSA-c8w9-7pxw-2m9j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

Priority LOW 38CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38, EX6120 before 1.0.0.48, EX6130 before 1.0.0.30, R6300v2 before 1.0.4.52, R6400 before 1.0.1.52, R7000 before 1.0.11.126, R7900 before 1.0.4.30, R8000 before 1.0.4.52, R7000P before 1.3.2.124, R8000P before 1.4.1.50, RAX80 before 1.0.3.88, R6900P before 1.3.2.124, R7900P before 1.4.1.50, and RAX75 before 1.0.3.88.

Why it matters now

EPSS 0.00465 40th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:netgear:ex6000_firmware:*:*:*:*:*:*:*:*before 1.0.0.38VulnerableNETGEAR
cpe:2.3:h:netgear:ex6000:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*before 1.0.0.48VulnerableNETGEAR
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*before 1.0.0.30VulnerableNETGEAR
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6300v2_firmware:*:*:*:*:*:*:*:*before 1.0.4.52VulnerableNETGEAR
cpe:2.3:h:netgear:r6300v2:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*before 1.0.1.52VulnerableNETGEAR
cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
  • cpe:2.3:o:netgear:ex6000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.38 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.48 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.30 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6300v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.52 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6300v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.52 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*before 1.0.11.126VulnerableNETGEAR
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*before 1.0.4.30VulnerableNETGEAR
cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*before 1.0.4.52VulnerableNETGEAR
cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*before 1.4.1.50VulnerableNETGEAR
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*before 1.3.2.124VulnerableNETGEAR
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*before 1.0.3.88VulnerableNETGEAR
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*before 1.0.3.88VulnerableNETGEAR
cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*before 1.3.2.124VulnerableNETGEAR
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*before 1.4.1.50VulnerableNETGEAR
cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
  • cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.126 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.30 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.52 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.1.50 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2.124 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.88 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.88 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.2.124 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.1.50 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-45526
  2. 2026-10-03 Alias added: GHSA-c8w9-7pxw-2m9j

References

Patch 1

  • TI-2020-18240 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
  • TI-2018-15096 Certain NETGEAR devices are affected by a stack-based buffer overflow by an… CVSS 3.1CRITICAL 9.8
  • TI-2020-18244 Certain NETGEAR devices are affected by incorrect configuration of security settings. CVSS 3.1CRITICAL 9.4
  • TI-2019-14954 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. CVSS 3.1HIGH 8.8
  • TI-2018-15055 Certain NETGEAR devices are affected by a stack-based buffer overflow by an… CVSS 3.1HIGH 8.8
  • TI-2019-14911 Certain NETGEAR devices are affected by CSRF. CVSS 3.1HIGH 8.8
See all 20 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences