CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface (TCP port 20005) cannot be ruled out; however, exploitability was judged to be of "rather significant complexity" but not "impossible." The overflow is in SoftwareBus_dispatchNormalEPMsgOut in the KCodes NetUSB kernel module. Affected NETGEAR devices are D7800 before 1.0.1.68, R6400v2 before 1.0.4.122, and R6700v3 before 1.0.4.122.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.12

EPSS Ranking 93.4%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 7.5

References

Products affected by CVE-2021-45608

Netgear » D7800 » Version: N/A

cpe:2.3:h:netgear:d7800:-
Netgear » R6400v2 » Version: N/A

cpe:2.3:h:netgear:r6400v2:-
Netgear » R6700v3 » Version: N/A

cpe:2.3:h:netgear:r6700v3:-
Netgear » D7800 Firmware » Version: N/A

cpe:2.3:o:netgear:d7800_firmware:-
Netgear » D7800 Firmware » Version: 1.0.1.22

cpe:2.3:o:netgear:d7800_firmware:1.0.1.22
Netgear » D7800 Firmware » Version: 1.0.1.24

cpe:2.3:o:netgear:d7800_firmware:1.0.1.24
Netgear » D7800 Firmware » Version: 1.0.1.28

cpe:2.3:o:netgear:d7800_firmware:1.0.1.28
Netgear » D7800 Firmware » Version: 1.0.1.30

cpe:2.3:o:netgear:d7800_firmware:1.0.1.30
Netgear » D7800 Firmware » Version: 1.0.1.31

cpe:2.3:o:netgear:d7800_firmware:1.0.1.31
Netgear » D7800 Firmware » Version: 1.0.1.34

cpe:2.3:o:netgear:d7800_firmware:1.0.1.34
Netgear » D7800 Firmware » Version: 1.0.1.40

cpe:2.3:o:netgear:d7800_firmware:1.0.1.40
Netgear » D7800 Firmware » Version: 1.0.1.42

cpe:2.3:o:netgear:d7800_firmware:1.0.1.42
Netgear » D7800 Firmware » Version: 1.0.1.44

cpe:2.3:o:netgear:d7800_firmware:1.0.1.44
Netgear » D7800 Firmware » Version: 1.0.1.47

cpe:2.3:o:netgear:d7800_firmware:1.0.1.47
Netgear » D7800 Firmware » Version: 1.0.1.56

cpe:2.3:o:netgear:d7800_firmware:1.0.1.56
Netgear » D7800 Firmware » Version: 1.0.1.58

cpe:2.3:o:netgear:d7800_firmware:1.0.1.58
Netgear » D7800 Firmware » Version: 1.0.1.64

cpe:2.3:o:netgear:d7800_firmware:1.0.1.64
Netgear » R6400v2 Firmware » Version: N/A

cpe:2.3:o:netgear:r6400v2_firmware:-
Netgear » R6400v2 Firmware » Version: 1.0.2.66

cpe:2.3:o:netgear:r6400v2_firmware:1.0.2.66
Netgear » R6400v2 Firmware » Version: 1.0.4.102

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.102
Netgear » R6400v2 Firmware » Version: 1.0.4.102_10.0.75

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.102_10.0.75
Netgear » R6400v2 Firmware » Version: 1.0.4.106

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.106
Netgear » R6400v2 Firmware » Version: 1.0.4.118

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.118
Netgear » R6400v2 Firmware » Version: 1.0.4.120

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.120
Netgear » R6400v2 Firmware » Version: 1.0.4.84

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.84
Netgear » R6400v2 Firmware » Version: 1.0.4.98

cpe:2.3:o:netgear:r6400v2_firmware:1.0.4.98
Netgear » R6700v3 Firmware » Version: N/A

cpe:2.3:o:netgear:r6700v3_firmware:-
Netgear » R6700v3 Firmware » Version: 1.0.2.66

cpe:2.3:o:netgear:r6700v3_firmware:1.0.2.66
Netgear » R6700v3 Firmware » Version: 1.0.4.106

cpe:2.3:o:netgear:r6700v3_firmware:1.0.4.106
Netgear » R6700v3 Firmware » Version: 1.0.4.118

cpe:2.3:o:netgear:r6700v3_firmware:1.0.4.118
Netgear » R6700v3 Firmware » Version: 1.0.4.120

cpe:2.3:o:netgear:r6700v3_firmware:1.0.4.120
Netgear » R6700v3 Firmware » Version: 1.0.4.84

cpe:2.3:o:netgear:r6700v3_firmware:1.0.4.84
Netgear » R6700v3 Firmware » Version: 1.0.4.98

cpe:2.3:o:netgear:r6700v3_firmware:1.0.4.98

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45608

Products

Pricing

Contact Us