What is CVE-2021-45637?

CVE-2021-45637 is a high-severity vulnerability in Netgear Ac2100, classified under Out-of-bounds Write. CVSS score: 8.3/10. Published 2021-12-26.

How severe is CVE-2021-45637?

High severity. CVSS v3 base score is 8.3 out of 10.

Buffer overflow in Netgear Ac2100

CVE-2021-45637

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 before 1.2.0.62, R6700v2 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, AC210…

Vulnerability class: Buffer Overflow

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.

Affected products

Netgear Ac2100
Netgear Ac2100_firmware
Netgear Ac2400
Netgear Ac2400_firmware
Netgear Ac2600
Netgear Ac2600_firmware
Netgear R6260
Netgear R6260_firmware
Netgear R6700v2
Netgear R6700v2_firmware

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-45637?: CVE-2021-45637 is a high-severity vulnerability in Netgear Ac2100, classified under Out-of-bounds Write. CVSS score: 8.3/10. Published 2021-12-26.
How severe is CVE-2021-45637?: High severity. CVSS v3 base score is 8.3 out of 10.