Buffer overflow in Netgear D7800
CVE-2018-21151
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.
Vulnerability class: Buffer Overflow
EPSS: 0.007 (48.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-21151?
- CVE-2018-21151 is a medium-severity vulnerability in Netgear D7800, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.8/10. Published 2020-04-22.
- How severe is CVE-2018-21151?
- Medium severity. CVSS v3 base score is 6.8 out of 10.