What is CVE-2021-38524?

CVE-2021-38524 is a medium-severity vulnerability in Netgear Mk62, classified under Out-of-bounds Write. CVSS score: 4.5/10. Published 2021-08-11.

How severe is CVE-2021-38524?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Buffer overflow in Netgear Mk62

CVE-2021-38524

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX200 before 1…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Netgear Mk62
Netgear Mk62_firmware
Netgear Mr60
Netgear Mr60_firmware
Netgear Ms60
Netgear Ms60_firmware
Netgear Rax15
Netgear Rax15_firmware
Netgear Rax20
Netgear Rax200

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-38524?: CVE-2021-38524 is a medium-severity vulnerability in Netgear Mk62, classified under Out-of-bounds Write. CVSS score: 4.5/10. Published 2021-08-11.
How severe is CVE-2021-38524?: Medium severity. CVSS v3 base score is 4.5 out of 10.