CVEvulnerability

CVE-2021-27254

8.8 HIGH Published 2021-03-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.3 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-259, CWE-798

Description

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287.

Affected configurations

• netgear br200 firmware (< 5.10.0.5) • netgear br500 firmware (< 5.10.0.5) • netgear d7800 firmware (< 1.0.1.60) • netgear ex6100v2 firmware (< 1.0.1.98) • netgear ex6150v2 firmware (< 1.0.1.98) • netgear ex6250 firmware (< 1.0.0.134) • netgear ex6400 firmware (< 1.0.2.158) • netgear ex6400v2 firmware (< 1.0.0.134) • netgear ex6410 firmware (< 1.0.0.134) • netgear ex6420 firmware (< 1.0.0.134) • netgear ex7300 firmware (< 1.0.2.158) • netgear ex7300v2 firmware (< 1.0.0.134) • netgear ex7320 firmware (< 1.0.0.134) • netgear ex7700 firmware (< 1.0.0.216) • netgear ex8000 firmware (< 1.0.1.232) • netgear lbr20 firmware (< 2.6.3.50) • netgear r7800 firmware (< 1.0.2.80) • netgear r8900 firmware (< 1.0.5.28) • netgear r9000 firmware (< 1.0.5.28) • netgear rbk12 firmware (< 2.7.2.104) • netgear rbk13 firmware (< 2.7.2.104) • netgear rbk14 firmware (< 2.7.2.104) • netgear rbk15 firmware (< 2.7.2.104) • netgear rbk20 firmware (< 2.6.2.104) • netgear rbk23 firmware (< 2.7.2.104) • netgear rbk40 firmware (< 2.6.2.104) • netgear rbk43 firmware (< 2.6.2.104) • netgear rbk43s firmware (< 2.6.2.104) • netgear rbk44 firmware (< 2.6.2.104) • netgear rbk50 firmware (< 2.7.2.104) • netgear rbk53 firmware (< 2.7.2.104) • netgear rbr10 firmware (< 2.6.2.104) • netgear rbr20 firmware (< 2.6.2.104) • netgear rbr40 firmware (< 2.6.2.104) • netgear rbr50 firmware (< 2.7.2.104) • netgear rbs10 firmware (< 2.6.2.104) • netgear rbs20 firmware (< 2.6.2.104) • netgear rbs40 firmware (< 2.6.2.104) • netgear rbs50 firmware (< 2.7.2.104) • netgear rbs50y firmware (< 2.6.2.104) • netgear xr450 firmware (< 2.3.2.114) • netgear xr500 firmware (< 2.3.2.114) • netgear xr700 firmware (< 1.0.1.38)

Related

Weakness · CWE (2)

  • CWE-259 Use of Hard-coded Password weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References