CVE-2021-34983

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-34983
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of authentication prior to allowing access to system configuration information. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13708.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ Third Party Advisory
https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:v6510-1fxaus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:v6510-1fxaus:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:lax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lax20:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:*
History

14 Aug 2025, 01:40

Type Values Removed Values Added
References () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ - () https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ - Third Party Advisory
CPE cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgn2200v4:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:wnr3500lv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndr3400v3:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:dgn2200v4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:lax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:v6510-1fxaus:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:wndr3400v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:v6510-1fxaus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr3500lv2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lax20:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
First Time Netgear rax15
Netgear wnr3500lv2 Firmware
Netgear dc112a
Netgear ex7000
Netgear r8000
Netgear rax15 Firmware
Netgear rax45 Firmware
Netgear ex6130
Netgear dc112a Firmware
Netgear rax43
Netgear rax38v2
Netgear raxe450 Firmware
Netgear rax38v2 Firmware
Netgear d6220
Netgear r7000 Firmware
Netgear rax40v2
Netgear d6400
Netgear r7000p
Netgear mr60 Firmware
Netgear rax20
Netgear xr1000
Netgear dgn2200v4 Firmware
Netgear rax80 Firmware
Netgear wnr3500lv2
Netgear ms60
Netgear ex6120
Netgear r7100lg Firmware
Netgear r8500 Firmware
Netgear r8300 Firmware
Netgear v6510-1fxaus Firmware
Netgear r6400 Firmware
Netgear rax40v2 Firmware
Netgear r6400
Netgear xr1000 Firmware
Netgear r6900p Firmware
Netgear r7900p Firmware
Netgear rax48 Firmware
Netgear r6400v2 Firmware
Netgear rax43 Firmware
Netgear rax75 Firmware
Netgear dgn2200v4
Netgear d7000v2
Netgear rax50s
Netgear ex7500
Netgear rs400 Firmware
Netgear r8000p Firmware
Netgear lax20
Netgear rax48
Netgear r8000 Firmware
Netgear r7100lg
Netgear ex3800 Firmware
Netgear d6400 Firmware
Netgear rax20 Firmware
Netgear raxe500 Firmware
Netgear rs400
Netgear rax45
Netgear d7000v2 Firmware
Netgear r6900p
Netgear raxe450
Netgear r8300
Netgear
Netgear r7000p Firmware
Netgear v6510-1fxaus
Netgear mr80 Firmware
Netgear r6400v2
Netgear ms80 Firmware
Netgear ex6120 Firmware
Netgear rax50s Firmware
Netgear mr80
Netgear rax50
Netgear ex3700 Firmware
Netgear ex7500 Firmware
Netgear rax50 Firmware
Netgear ms60 Firmware
Netgear ex3700
Netgear r7850
Netgear rax35v2 Firmware
Netgear rax42
Netgear ex3800
Netgear ex6130 Firmware
Netgear wndr3400v3
Netgear ex7000 Firmware
Netgear d6220 Firmware
Netgear rax80
Netgear r7850 Firmware
Netgear wndr3400v3 Firmware
Netgear r8500
Netgear rax200 Firmware
Netgear r7960p
Netgear ms80
Netgear rax75
Netgear lax20 Firmware
Netgear r7900p
Netgear xr300
Netgear r7960p Firmware
Netgear rax42 Firmware
Netgear r8000p
Netgear r6700v3
Netgear r7000
Netgear r6700v3 Firmware
Netgear raxe500
Netgear rax35v2
Netgear xr300 Firmware
Netgear mr60
Netgear rax200

21 Nov 2024, 06:11

Type Values Removed Values Added
References () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 - () https://kb.netgear.com/000064313/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Extenders-Routers-and-DSL-Modem-Routers-PSV-2021-0159 -
References () https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ - () https://www.zerodayinitiative.com/advisories/ZDI-21-1275/ -

04 Aug 2024, 01:35

Type Values Removed Values Added
CWE CWE-120

03 Jul 2024, 01:36

Type Values Removed Values Added
CWE CWE-120

08 May 2024, 13:15

Type Values Removed Values Added
Summary
  • (es) Falta autenticación httpd de varios enrutadores de NETGEAR para vulnerabilidad de divulgación de información de funciones críticas. Esta vulnerabilidad permite a atacantes adyacentes a la red revelar información confidencial sobre instalaciones afectadas de múltiples enrutadores NETGEAR. No se requiere autenticación para aprovechar esta vulnerabilidad. La falla específica existe dentro del servicio httpd, que escucha en el puerto TCP 80 de forma predeterminada. El problema se debe a la falta de autenticación antes de permitir el acceso a la información de configuración del sistema. Un atacante puede aprovechar esta vulnerabilidad para revelar las credenciales almacenadas, lo que provocaría un mayor compromiso. Era ZDI-CAN-13708.

07 May 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-07 23:15

Updated : 2025-08-14 01:40

NVD link : CVE-2021-34983

Mitre link : CVE-2021-34983

CVE.ORG link : CVE-2021-34983

JSON object : View

Products Affected

netgear

  • d7000v2_firmware
  • rax15_firmware
  • r8000_firmware
  • rax40v2_firmware
  • wnr3500lv2
  • dgn2200v4_firmware
  • rax15
  • dgn2200v4
  • raxe500_firmware
  • ex7000_firmware
  • xr1000_firmware
  • xr300_firmware
  • rax75
  • rax200
  • r6700v3_firmware
  • d6400_firmware
  • r7000
  • dc112a
  • r8500_firmware
  • r7100lg_firmware
  • ex6130_firmware
  • ex7500
  • r6400
  • rax200_firmware
  • r7100lg
  • rax20_firmware
  • r8300
  • v6510-1fxaus_firmware
  • rax35v2_firmware
  • rax75_firmware
  • rs400_firmware
  • ms60_firmware
  • mr80
  • rax20
  • dc112a_firmware
  • r6900p_firmware
  • ex6120_firmware
  • lax20_firmware
  • ex7000
  • r8300_firmware
  • rax50
  • rax35v2
  • mr60
  • r6900p
  • rax80_firmware
  • rax45_firmware
  • rax40v2
  • rax42
  • r8500
  • r7900p
  • ms80_firmware
  • ex3800
  • raxe450_firmware
  • d6400
  • rax45
  • rax50_firmware
  • xr300
  • xr1000
  • r6700v3
  • d6220_firmware
  • r7850_firmware
  • d6220
  • rax80
  • r7850
  • r6400v2_firmware
  • ex3800_firmware
  • raxe500
  • ex6120
  • d7000v2
  • rax38v2
  • ms60
  • r7000p_firmware
  • v6510-1fxaus
  • r6400v2
  • rax48_firmware
  • rax50s
  • wnr3500lv2_firmware
  • rax43
  • ex3700_firmware
  • r8000p
  • r7960p_firmware
  • wndr3400v3_firmware
  • wndr3400v3
  • lax20
  • rs400
  • ex3700
  • ex6130
  • rax38v2_firmware
  • r7960p
  • mr80_firmware
  • ex7500_firmware
  • rax43_firmware
  • r8000
  • r7000_firmware
  • r6400_firmware
  • rax48
  • r8000p_firmware
  • mr60_firmware
  • raxe450
  • r7000p
  • rax50s_firmware
  • r7900p_firmware
  • rax42_firmware
  • ms80
CWE
CWE-306

Missing Authentication for Critical Function