CVE-2021-27254

HIGH

8.8

Description

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published3/5/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

netgear:br200netgear:br200_firmwarenetgear:br500netgear:br500_firmwarenetgear:d7800netgear:d7800_firmwarenetgear:ex6100v2netgear:ex6100v2_firmwarenetgear:ex6150v2netgear:ex6150v2_firmwarenetgear:ex6250netgear:ex6250_firmwarenetgear:ex6400netgear:ex6400_firmwarenetgear:ex6400v2netgear:ex6400v2_firmwarenetgear:ex6410netgear:ex6410_firmwarenetgear:ex6420netgear:ex6420_firmwarenetgear:ex7300netgear:ex7300_firmwarenetgear:ex7300v2netgear:ex7300v2_firmwarenetgear:ex7320netgear:ex7320_firmwarenetgear:ex7700netgear:ex7700_firmwarenetgear:ex8000netgear:ex8000_firmwarenetgear:lbr20netgear:lbr20_firmwarenetgear:r7800netgear:r7800_firmwarenetgear:r8900netgear:r8900_firmwarenetgear:r9000netgear:r9000_firmwarenetgear:rbk12netgear:rbk12_firmwarenetgear:rbk13netgear:rbk13_firmwarenetgear:rbk14netgear:rbk14_firmwarenetgear:rbk15netgear:rbk15_firmwarenetgear:rbk20netgear:rbk20_firmwarenetgear:rbk23netgear:rbk23_firmwarenetgear:rbk40netgear:rbk40_firmwarenetgear:rbk43netgear:rbk43_firmwarenetgear:rbk43snetgear:rbk43s_firmwarenetgear:rbk44netgear:rbk44_firmwarenetgear:rbk50netgear:rbk50_firmwarenetgear:rbk53netgear:rbk53_firmwarenetgear:rbr10netgear:rbr10_firmwarenetgear:rbr20netgear:rbr20_firmwarenetgear:rbr40netgear:rbr40_firmwarenetgear:rbr50netgear:rbr50_firmwarenetgear:rbs10netgear:rbs10_firmwarenetgear:rbs20netgear:rbs20_firmwarenetgear:rbs40netgear:rbs40_firmwarenetgear:rbs50netgear:rbs50_firmwarenetgear:rbs50ynetgear:rbs50y_firmwarenetgear:xr450netgear:xr450_firmwarenetgear:xr500netgear:xr500_firmwarenetgear:xr700netgear:xr700_firmware

Weaknesses (CWE)

CWE-259CWE-798

References

https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders(zdi-disclosures@trendmicro.com)

https://www.zerodayinitiative.com/advisories/ZDI-21-252/(zdi-disclosures@trendmicro.com)

https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-21-252/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.