CVE-2021-45530: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R80...

Summary

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R8000P before 1.4.2.84, RAX20 before 1.0.2.82, RAX45 before 1.0.2.82, RAX80 before 1.0.4.120, R7900P befor...

What to do

Update netgear r7000_firmware to version 1.0.11.126 or later.
Update netgear r7000p_firmware to version 1.4.2.84 or later.
Update netgear r7960p_firmware to version 1.4.2.84 or later.
Update netgear r8000_firmware to version 1.0.4.74 or later.
Update netgear r8000p_firmware to version 1.4.2.84 or later.
Update netgear rax20_firmware to version 1.0.2.82 or later.
Update netgear rax200_firmware to version 1.0.4.120 or later.
Update netgear rax45_firmware to version 1.0.2.82 or later.
Update netgear rax15_firmware to version 1.0.2.82 or later.
Update netgear rax75_firmware to version 1.0.4.120 or later.
Update netgear rax80_firmware to version 1.0.4.120 or later.
Update netgear rax50_firmware to version 1.0.2.82 or later.

Affected software

Vendor	Product	Affected versions
netgear	r7000_firmware	< 1.0.11.126 `cpe:2.3:o:netgear:r7000_firmware::::::::`
netgear	r7000p_firmware	< 1.4.2.84 `cpe:2.3:o:netgear:r7000p_firmware::::::::`
netgear	r7960p_firmware	< 1.4.2.84 `cpe:2.3:o:netgear:r7960p_firmware::::::::`
netgear	r8000_firmware	< 1.0.4.74 `cpe:2.3:o:netgear:r8000_firmware::::::::`
netgear	r8000p_firmware	< 1.4.2.84 `cpe:2.3:o:netgear:r8000p_firmware::::::::`
netgear	rax20_firmware	< 1.0.2.82 `cpe:2.3:o:netgear:rax20_firmware::::::::`
netgear	rax200_firmware	< 1.0.4.120 `cpe:2.3:o:netgear:rax200_firmware::::::::`
netgear	rax45_firmware	< 1.0.2.82 `cpe:2.3:o:netgear:rax45_firmware::::::::`
netgear	rax15_firmware	< 1.0.2.82 `cpe:2.3:o:netgear:rax15_firmware::::::::`
netgear	rax75_firmware	< 1.0.4.120 `cpe:2.3:o:netgear:rax75_firmware::::::::`
netgear	rax80_firmware	< 1.0.4.120 `cpe:2.3:o:netgear:rax80_firmware::::::::`
netgear	rax50_firmware	< 1.0.2.82 `cpe:2.3:o:netgear:rax50_firmware::::::::`

Original advisory text

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R80...

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126, R7960P before 1.4.2.84, R8000 before 1.0.4.74, RAX200 before 1.0.4.120, R8000P before 1.4.2.84, RAX20 before 1.0.2.82, RAX45 before 1.0.2.82, RAX80 before 1.0.4.120, R7900P before 1.4.2.84, RAX15 before 1.0.2.82, RAX50 before 1.0.2.82, and RAX75 before 1.0.4.120.

References

https://kb.netgear.com/000064486/Security-Advisory-for-Post-Authentication-Buffe... Patch Vendor Advisory