CVE-2021-34982: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

Description

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. When parsing the strings file, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13709.

Metrics

EPSS Probability

0.58%

43.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Netgear	Dc112a Firmware	< 1.0.0.62
Netgear	Ex3700 Firmware	< 1.0.0.94
Netgear	Ex3800 Firmware	< 1.0.0.94
Netgear	Ex6120 Firmware	< 1.0.0.66
Netgear	Ex6130 Firmware	< 1.0.0.46
Netgear	Ex7000 Firmware	< 1.0.1.106
Netgear	Ex7500 Firmware	< 1.0.1.76
Netgear	Mr60 Firmware	< 1.1.6.122
Netgear	Mr80 Firmware	< 1.1.6.10
Netgear	Ms60 Firmware	< 1.1.6.122
Netgear	Ms80 Firmware	< 1.1.6.10
Netgear	Lax20 Firmware	< 1.1.6.30
Netgear	R6400 Firmware	< 1.0.1.76
Netgear	R6400v2 Firmware	< 1.0.4.120
Netgear	R6700v3 Firmware	< 1.0.4.120
Netgear	R6900p Firmware	< 1.3.3.148
Netgear	R7000 Firmware	< 1.0.11.128
Netgear	R7000p Firmware	< 1.3.3.148
Netgear	R7100lg Firmware	< 1.0.0.72
Netgear	R7850 Firmware	< 1.0.5.76
Netgear	R7900p Firmware	< 1.4.2.84
Netgear	R7960p Firmware	< 1.4.2.84
Netgear	R8000 Firmware	< 1.0.4.76
Netgear	R8000p Firmware	< 1.4.2.84
Netgear	R8300 Firmware	< 1.0.2.156
Netgear	R8500 Firmware	< 1.0.2.156
Netgear	Rax15 Firmware	< 1.0.4.100
Netgear	Rax20 Firmware	< 1.0.4.100
Netgear	Rax200 Firmware	< 1.0.5.132
Netgear	Rax35v2 Firmware	< 1.0.4.100
Netgear	Rax38v2 Firmware	< 1.0.4.100
Netgear	Rax40v2 Firmware	< 1.0.4.100
Netgear	Rax42 Firmware	< 1.0.4.100
Netgear	Rax43 Firmware	< 1.0.4.100
Netgear	Rax45 Firmware	< 1.0.4.100
Netgear	Rax48 Firmware	< 1.0.4.100
Netgear	Rax50 Firmware	< 1.0.4.100
Netgear	Rax50s Firmware	< 1.0.4.100
Netgear	Rax75 Firmware	< 1.0.5.132
Netgear	Rax80 Firmware	< 1.0.5.132
Netgear	Raxe450 Firmware	< 1.0.8.70
Netgear	Raxe500 Firmware	< 1.0.8.70
Netgear	Rs400 Firmware	< 1.5.1.80
Netgear	Wndr3400v3 Firmware	< 1.0.1.42
Netgear	Wnr3500lv2 Firmware	< 1.2.0.70
Netgear	Xr1000 Firmware	< 1.0.0.64
Netgear	Xr300 Firmware	< 1.0.3.68
Netgear	D6220 Firmware	< 1.0.0.76
Netgear	D6400 Firmware	< 1.0.0.108
Netgear	D7000v2 Firmware	< 1.0.0.76

Showing 50 of 52 affected configurations. See NVD for the full list.

References

Timeline

Published: May 7, 2024
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2021-34982?

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. When parsing the strings file, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13709.

How severe is CVE-2021-34982?

Severity scoring for CVE-2021-34982 is pending analysis. The EPSS model estimates a 0.58% probability of exploitation in the next 30 days.

How do I fix CVE-2021-34982?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.