CVE-2021-34947
Description
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the soap_block_table file. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13055.
How to fix
- netgear r7800_firmware1.0.2.84 or later
- netgear d7800_firmware1.0.1.64 or later
- netgear ex2700_firmware1.0.1.66 or later
- netgear ex6100_firmware1.0.1.106 or later
- netgear ex6150_firmware1.0.1.106 or later
- netgear ex6200_firmware1.0.1.86 or later
- netgear ex6250_firmware1.0.0.146 or later
- netgear ex6400_firmware1.0.2.164 or later
- netgear ex6400v2_firmware1.0.0.146 or later
- netgear ex6410_firmware1.0.0.146 or later
- netgear ex6420_firmware1.0.0.146 or later
- netgear ex6500v1_firmware1.0.0.146 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear r7800_firmware | v < 1.0.2.84 | 1.0.2.84 |
| netgear d7800_firmware | v < 1.0.1.64 | 1.0.1.64 |
| netgear ex2700_firmware | v < 1.0.1.66 | 1.0.1.66 |
| netgear ex6100_firmware | v < 1.0.1.106 | 1.0.1.106 |
| netgear ex6150_firmware | v < 1.0.1.106 | 1.0.1.106 |
| netgear ex6200_firmware | v < 1.0.1.86 | 1.0.1.86 |
| netgear ex6250_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex6400_firmware | v < 1.0.2.164 | 1.0.2.164 |
| netgear ex6400v2_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex6410_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex6420_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex6500v1_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex7300_firmware | v < 1.0.2.164 | 1.0.2.164 |
| netgear ex7300v2_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex7320_firmware | v < 1.0.0.146 | 1.0.0.146 |
| netgear ex7700_firmware | v < 1.0.0.222 | 1.0.0.222 |
| netgear ex8000_firmware | v < 1.0.1.238 | 1.0.1.238 |
| netgear lbr1020_firmware | v < 2.6.5.32 | 2.6.5.32 |
| netgear lbr20_firmware | v < 2.6.5.32 | 2.6.5.32 |
| netgear r6700ax_firmware | v < 1.0.5.108 | 1.0.5.108 |
| netgear r8900_firmware | v < 1.0.5.36 | 1.0.5.36 |
| netgear r9000_firmware | v < 1.0.5.36 | 1.0.5.36 |
| netgear rax10_firmware | v < 1.0.5.108 | 1.0.5.108 |
| netgear rax120_firmware | v < 1.2.2.24 | 1.2.2.24 |
| netgear rax120v2_firmware | v < 1.2.2.24 | 1.2.2.24 |
| netgear rax70_firmware | v < 1.0.5.108 | 1.0.5.108 |
| netgear rax78_firmware | v < 1.0.5.108 | 1.0.5.108 |
| netgear rbr10_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbr20_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbr40_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbr50_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbs10_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbs20_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbs40_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbs50_firmware | v < 2.7.4.24 | 2.7.4.24 |
| netgear rbs50y_firmware | v < 2.7.4.12 | 2.7.4.12 |
| netgear wn3000rpv2_firmware | v < 1.0.0.88 | 1.0.0.88 |
| netgear wnr2000v5_firmware | v < 1.0.0.78 | 1.0.0.78 |
| netgear xr450_firmware | v < 2.3.2.130 | 2.3.2.130 |
| netgear xr500_firmware | v < 2.3.2.130 | 2.3.2.130 |
| netgear xr700_firmware | v < 1.0.1.44 | 1.0.1.44 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.