CVE-2018-21215
Summary
| CVE | CVE-2018-21215 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-28 16:15:00 UTC |
| Updated | 2020-05-04 13:58:00 UTC |
| Description | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, EX2700 before 1.0.1.28, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56. |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | D3600 | - | All | All | All |
| Hardware | Netgear | D3600 | - | All | All | All |
| Operating System | Netgear | D3600 Firmware | All | All | All | All |
| Operating System | Netgear | D3600 Firmware | All | All | All | All |
| Hardware | Netgear | D6000 | - | All | All | All |
| Hardware | Netgear | D6000 | - | All | All | All |
| Operating System | Netgear | D6000 Firmware | All | All | All | All |
| Operating System | Netgear | D6000 Firmware | All | All | All | All |
| Hardware | Netgear | D6100 | - | All | All | All |
| Hardware | Netgear | D6100 | - | All | All | All |
| Operating System | Netgear | D6100 Firmware | All | All | All | All |
| Operating System | Netgear | D6100 Firmware | All | All | All | All |
| Hardware | Netgear | Ex2700 | - | All | All | All |
| Hardware | Netgear | Ex2700 | - | All | All | All |
| Operating System | Netgear | Ex2700 Firmware | All | All | All | All |
| Operating System | Netgear | Ex2700 Firmware | All | All | All | All |
| Hardware | Netgear | R7500 | v2 | All | All | All |
| Hardware | Netgear | R7500 | v2 | All | All | All |
| Operating System | Netgear | R7500 Firmware | All | All | All | All |
| Operating System | Netgear | R7500 Firmware | All | All | All | All |
| Hardware | Netgear | R9000 | - | All | All | All |
| Hardware | Netgear | R9000 | - | All | All | All |
| Operating System | Netgear | R9000 Firmware | All | All | All | All |
| Operating System | Netgear | R9000 Firmware | All | All | All | All |
| Hardware | Netgear | Wn2000rpt | v3 | All | All | All |
| Hardware | Netgear | Wn2000rpt | v3 | All | All | All |
| Operating System | Netgear | Wn2000rpt Firmware | All | All | All | All |
| Operating System | Netgear | Wn2000rpt Firmware | All | All | All | All |
| Hardware | Netgear | Wn3000rp | v3 | All | All | All |
| Hardware | Netgear | Wn3000rp | v3 | All | All | All |
| Operating System | Netgear | Wn3000rp Firmware | All | All | All | All |
| Operating System | Netgear | Wn3000rp Firmware | All | All | All | All |
| Hardware | Netgear | Wn3100rp | v2 | All | All | All |
| Hardware | Netgear | Wn3100rp | v2 | All | All | All |
| Operating System | Netgear | Wn3100rp Firmware | All | All | All | All |
| Operating System | Netgear | Wn3100rp Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Pre-Authentication Buffer Overflow on Some Routers, Gateways, and Extenders, PSV-2017-2486 | Answer | NETGEAR Support | CONFIRM | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.