CVE-2018-21206 describes a stack-based buffer overflow vulnerability in various NETGEAR router and extender models, including the D7800, EX2700, and R7500. This flaw allows an unauthenticated attacker on the local network to execute arbitrary code, leading to a high-severity CVSS score of 8.8. The attack requires no user interaction and can result in complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been reported, and community discussion is minimal, the potential impact remains significant for unpatched devices.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.1.30CPE matchmatch criteria | cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.1.28CPE matchmatch criteria | cpe:2.3:o:netgear:ex2700_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.1.20CPE matchmatch criteria | cpe:2.3:o:netgear:r6100_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.0.118CPE matchmatch criteria | cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.3.24CPE matchmatch criteria | cpe:2.3:o:netgear:r7500_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.