CVE-2021-27251
High
Description
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a insecure protocol to deliver updates. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12308.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Netgear R7800 Firmware
PublishedApr 14, 2021
First seenApr 14, 2021
Weakness typeCWE-319CWE-319
How to fix
Update
- netgear r7800_firmware1.0.2.80 or later
- netgear br200_firmware5.10.0.5 or later
- netgear br500_firmware5.10.0.5 or later
- netgear d7800_firmware1.0.1.60 or later
- netgear ex6100v2_firmware1.0.1.98 or later
- netgear ex6150_firmware1.0.1.98 or later
- netgear ex6250_firmware1.0.0.134 or later
- netgear ex6400_firmware1.0.2.158 or later
- netgear ex6400v2_firmware1.0.0.134 or later
- netgear ex6410_firmware1.0.0.134 or later
- netgear ex6420_firmware1.0.0.134 or later
- netgear ex7300_firmware1.0.2.158 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear r7800_firmware | v < 1.0.2.80 | 1.0.2.80 |
| netgear br200_firmware | v < 5.10.0.5 | 5.10.0.5 |
| netgear br500_firmware | v < 5.10.0.5 | 5.10.0.5 |
| netgear d7800_firmware | v < 1.0.1.60 | 1.0.1.60 |
| netgear ex6100v2_firmware | v < 1.0.1.98 | 1.0.1.98 |
| netgear ex6150_firmware | v < 1.0.1.98 | 1.0.1.98 |
| netgear ex6250_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex6400_firmware | v < 1.0.2.158 | 1.0.2.158 |
| netgear ex6400v2_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex6410_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex6420_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex7300_firmware | v < 1.0.2.158 | 1.0.2.158 |
| netgear ex7300v2_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex7320_firmware | v < 1.0.0.134 | 1.0.0.134 |
| netgear ex7700_firmware | v < 1.0.0.216 | 1.0.0.216 |
| netgear ex8000_firmware | v < 1.0.1.232 | 1.0.1.232 |
| netgear lbr20_firmware | v < 2.6.3.50 | 2.6.3.50 |
| netgear r8900_firmware | v < 1.0.5.28 | 1.0.5.28 |
| netgear r9000_firmware | v < 1.0.5.28 | 1.0.5.28 |
| netgear rbk12_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk13_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk14_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk15_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk20_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbk23_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk40_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbk43_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbk43s_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbk44_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbk50_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbk53_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbr10_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbr20_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbr40_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbr50_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbs10_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbs20_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbs40_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear rbs50_firmware | v < 2.7.2.104 | 2.7.2.104 |
| netgear rbs50y_firmware | v < 2.6.2.104 | 2.6.2.104 |
| netgear xr450_firmware | v < 2.3.2.114 | 2.3.2.114 |
| netgear xr500_firmware | v < 2.3.2.114 | 2.3.2.114 |
| netgear xr700_firmware | v < 1.0.1.38 | 1.0.1.38 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.