| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 7.9 | $0-$5k | 0.00 |
Summary
A vulnerability classified as critical was found in Netgear D3600, D6000, D6100, EX2700, R7500v2, R9000, WN2000RPTv3, WN3000RPv3 and WN3100RPv2. This impacts an unknown function. Executing a manipulation can lead to memory corruption. The identification of this vulnerability is CVE-2018-21215. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.
Details
A vulnerability classified as critical was found in Netgear D3600, D6000, D6100, EX2700, R7500v2, R9000, WN2000RPTv3, WN3000RPv3 and WN3100RPv2 (Wireless LAN Software). This vulnerability affects an unknown function. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, EX2700 before 1.0.1.28, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.
The weakness was shared 04/28/2020 (Website). The advisory is shared for download at kb.netgear.com. This vulnerability was named CVE-2018-21215 since 04/20/2020. The attack needs to approached within the local network. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.
Upgrading eliminates this vulnerability.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Product
Type
Vendor
Name
License
Website
- Vendor: https://www.netgear.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 8.0VulDB Meta Temp Score: 7.9
VulDB Base Score: 6.3
VulDB Temp Score: 6.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 8.8
NVD Vector: 🔍
CNA Base Score: 8.8
CNA Vector (MITRE): 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Memory corruptionCWE: CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Partially
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Timeline
04/20/2020 🔍04/28/2020 🔍
04/29/2020 🔍
06/04/2024 🔍
Sources
Vendor: netgear.comAdvisory: kb.netgear.com
Status: Not defined
Confirmation: 🔍
CVE: CVE-2018-21215 (🔍)
GCVE (CVE): GCVE-0-2018-21215
GCVE (VulDB): GCVE-100-154504
Entry
Created: 04/29/2020 07:50Updated: 06/04/2024 07:21
Changes: 04/29/2020 07:50 (36), 04/29/2020 07:55 (12), 10/14/2020 00:40 (1), 10/14/2020 00:48 (1), 06/04/2024 07:21 (33)
Complete: 🔍
Cache ID: 216::103
VulDB is the best source for vulnerability data and more expert information about this specific topic.
No comments yet. Languages: en.
Please log in to comment.