CVE-2020-27861
Summary
| CVE | CVE-2020-27861 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-12 00:15:00 UTC |
| Updated | 2021-03-23 18:54:00 UTC |
| Description | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Cbk40 | - | All | All | All |
| Hardware | Netgear | Cbk40 | - | All | All | All |
| Operating System | Netgear | Cbk40 Firmware | All | All | All | All |
| Operating System | Netgear | Cbk40 Firmware | All | All | All | All |
| Hardware | Netgear | Cbk43 | - | All | All | All |
| Hardware | Netgear | Cbk43 | - | All | All | All |
| Operating System | Netgear | Cbk43 Firmware | All | All | All | All |
| Operating System | Netgear | Cbk43 Firmware | All | All | All | All |
| Hardware | Netgear | Cbr40 | - | All | All | All |
| Hardware | Netgear | Cbr40 | - | All | All | All |
| Operating System | Netgear | Cbr40 Firmware | All | All | All | All |
| Operating System | Netgear | Cbr40 Firmware | All | All | All | All |
| Hardware | Netgear | Ex6200 | v2 | All | All | All |
| Hardware | Netgear | Ex6200 | v2 | All | All | All |
| Operating System | Netgear | Ex6200 Firmware | All | All | All | All |
| Operating System | Netgear | Ex6200 Firmware | All | All | All | All |
| Hardware | Netgear | Ex7700 | - | All | All | All |
| Hardware | Netgear | Ex7700 | - | All | All | All |
| Operating System | Netgear | Ex7700 Firmware | All | All | All | All |
| Operating System | Netgear | Ex7700 Firmware | All | All | All | All |
| Hardware | Netgear | Ex8000 | - | All | All | All |
| Hardware | Netgear | Ex8000 | - | All | All | All |
| Operating System | Netgear | Ex8000 Firmware | All | All | All | All |
| Operating System | Netgear | Ex8000 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk12 | - | All | All | All |
| Hardware | Netgear | Rbk12 | - | All | All | All |
| Operating System | Netgear | Rbk12 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk12 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk13 | - | All | All | All |
| Hardware | Netgear | Rbk13 | - | All | All | All |
| Operating System | Netgear | Rbk13 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk13 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk14 | - | All | All | All |
| Hardware | Netgear | Rbk14 | - | All | All | All |
| Operating System | Netgear | Rbk14 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk14 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk15 | - | All | All | All |
| Hardware | Netgear | Rbk15 | - | All | All | All |
| Operating System | Netgear | Rbk15 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk15 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk20 | - | All | All | All |
| Hardware | Netgear | Rbk20 | - | All | All | All |
| Hardware | Netgear | Rbk20w | - | All | All | All |
| Hardware | Netgear | Rbk20w | - | All | All | All |
| Operating System | Netgear | Rbk20w Firmware | All | All | All | All |
| Operating System | Netgear | Rbk20w Firmware | All | All | All | All |
| Operating System | Netgear | Rbk20 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk20 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk20 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk20 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk22 | - | All | All | All |
| Hardware | Netgear | Rbk22 | - | All | All | All |
| Operating System | Netgear | Rbk22 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk22 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk22 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk22 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk23 | - | All | All | All |
| Hardware | Netgear | Rbk23 | - | All | All | All |
| Hardware | Netgear | Rbk23w | - | All | All | All |
| Hardware | Netgear | Rbk23w | - | All | All | All |
| Operating System | Netgear | Rbk23w Firmware | All | All | All | All |
| Operating System | Netgear | Rbk23w Firmware | All | All | All | All |
| Operating System | Netgear | Rbk23 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk23 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk23 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk23 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk30 | - | All | All | All |
| Hardware | Netgear | Rbk30 | - | All | All | All |
| Operating System | Netgear | Rbk30 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk30 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk33 | - | All | All | All |
| Hardware | Netgear | Rbk33 | - | All | All | All |
| Operating System | Netgear | Rbk33 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk33 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk40 | - | All | All | All |
| Hardware | Netgear | Rbk40 | - | All | All | All |
| Operating System | Netgear | Rbk40 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk40 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk40 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk40 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk43 | - | All | All | All |
| Hardware | Netgear | Rbk43 | - | All | All | All |
| Hardware | Netgear | Rbk43s | - | All | All | All |
| Hardware | Netgear | Rbk43s | - | All | All | All |
| Operating System | Netgear | Rbk43s Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43s Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43s Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43s Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk43 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk44 | - | All | All | All |
| Hardware | Netgear | Rbk44 | - | All | All | All |
| Operating System | Netgear | Rbk44 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk44 Router Firmware | All | All | All | All |
| Operating System | Netgear | Rbk44 Satellite Firmware | All | All | All | All |
| Operating System | Netgear | Rbk44 Satellite Firmware | All | All | All | All |
| Hardware | Netgear | Rbk50 | - | All | All | All |
| Hardware | Netgear | Rbk50 | - | All | All | All |
| Hardware | Netgear | Rbk50v | - | All | All | All |
| Hardware | Netgear | Rbk50v | - | All | All | All |
| Operating System | Netgear | Rbk50v Firmware | All | All | All | All |
| Operating System | Netgear | Rbk50v Firmware | All | All | All | All |
| Operating System | Netgear | Rbk50 Firmware | All | All | All | All |
| Operating System | Netgear | Rbk50 Firmware | All | All | All | All |
| Hardware | Netgear | Rbk52w | - | All | All | All |
| Hardware | Netgear | Rbk52w | - | All | All | All |
| Operating System | Netgear | Rbk52w Firmware | All | All | All | All |
| Operating System | Netgear | Rbk52w Firmware | All | All | All | All |
| Hardware | Netgear | Rbr10 | - | All | All | All |
| Hardware | Netgear | Rbr10 | - | All | All | All |
| Operating System | Netgear | Rbr10 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr10 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr20 | - | All | All | All |
| Hardware | Netgear | Rbr20 | - | All | All | All |
| Operating System | Netgear | Rbr20 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr20 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr40 | - | All | All | All |
| Hardware | Netgear | Rbr40 | - | All | All | All |
| Operating System | Netgear | Rbr40 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr40 Firmware | All | All | All | All |
| Hardware | Netgear | Rbr50 | - | All | All | All |
| Hardware | Netgear | Rbr50 | - | All | All | All |
| Operating System | Netgear | Rbr50 Firmware | All | All | All | All |
| Operating System | Netgear | Rbr50 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs10 | - | All | All | All |
| Hardware | Netgear | Rbs10 | - | All | All | All |
| Operating System | Netgear | Rbs10 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs10 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs20 | - | All | All | All |
| Hardware | Netgear | Rbs20 | - | All | All | All |
| Operating System | Netgear | Rbs20 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs20 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs40 | - | All | All | All |
| Hardware | Netgear | Rbs40 | - | All | All | All |
| Operating System | Netgear | Rbs40 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs40 Firmware | All | All | All | All |
| Hardware | Netgear | Rbs50 | - | All | All | All |
| Hardware | Netgear | Rbs50 | - | All | All | All |
| Operating System | Netgear | Rbs50 Firmware | All | All | All | All |
| Operating System | Netgear | Rbs50 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-20-1430 | Zero Day Initiative | MISC | www.zerodayinitiative.com | Third Party Advisory, VDB Entry |
| Security Advisory for Unauthenticated Command Injection Vulnerability on Some Extenders and Orbi WiFi Systems, PSV-2020-0301 | Answer | NETGEAR Support | MISC | kb.netgear.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.