Vulnerability Details CVE-2021-38526
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.2%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 5.0
Products affected by CVE-2021-38526
-
cpe:2.3:h:netgear:rax35:-
-
cpe:2.3:h:netgear:rax38:-
-
cpe:2.3:h:netgear:rax40:-
-
cpe:2.3:o:netgear:rax35_firmware:-
-
cpe:2.3:o:netgear:rax35_firmware:1.0.3.62
-
cpe:2.3:o:netgear:rax35_firmware:1.0.3.80
-
cpe:2.3:o:netgear:rax38_firmware:-
-
cpe:2.3:o:netgear:rax40_firmware:-
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.62
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.64
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.80