V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
CVE-2021-38524
CVE
Medium

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 be…

CVSS
4.9
Medium
EPSS
0.01
p54
Published
2021-01-01
Updated
2021-01-01
Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1.0.3.106, RAX45 before 1.0.2.32, RAX50 before 1.0.2.32, RAX75 before 1.0.3.106, RAX80 before 1.0.3.106, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, and RBS750 before 3.2.16.6.

Tags · CWE
RCE
CWE-787
Affected products
Mk62_firmwareMr60_firmwareMs60_firmwareRax15_firmwareRax200_firmwareRax20_firmwareRax45_firmwareRax50_firmwareRax75_firmwareRax80_firmwareRbk752_firmwareRbr750_firmwareRbs750_firmware
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: H
High (H)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.009 · p54
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Netgear
Rbr750Rbs750Rbk752Rbs750 FirmwareRbr750 FirmwareRbk752 FirmwareRax80Rax75Rax200Rax50+16
ProductVendorStatus
mk62_firmware*Tracked
mr60_firmware*Tracked
ms60_firmware*Tracked
rax15_firmware*Tracked
rax200_firmware*Tracked
rax20_firmware*Tracked
rax45_firmware*Tracked
rax50_firmware*Tracked
rax75_firmware*Tracked
rax80_firmware*Tracked
rbk752_firmware*Tracked
rbr750_firmware*Tracked
rbs750_firmware*Tracked
Source databases
CVE