CVE-2021-45608 Integer overflow in n/a
An integer overflow in the NetUSB kernel module allows remote code execution on various routers, requiring complex exploitation from the WAN interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-45608?
CVE-2021-45608 is a medium-severity vulnerability in Netgear D7800 Firmware, published on 26 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface (TCP port 20005) cannot be ruled out; however, exploitability was judged to be of "rather significant complexity" but not "impossible." The overflow is in SoftwareBus_dispatchNormalEPMsgOut in the KCodes NetUSB kernel module. Affected NETGEAR devices are D7800 before 1.0.1.68, R6400v2 before 1.0.4.122, and R6700v3 before 1.0.4.122.
Weakness: CWE-190
Which versions are affected by CVE-2021-45608?
It affects 3 products.
Products include Netgear D7800 Firmware, Netgear R6400v2 Firmware, Netgear R6700v3 Firmware.
How do I fix CVE-2021-45608?
No fix has been published for CVE-2021-45608 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-45608 being exploited?
There is no known exploitation of CVE-2021-45608 in the wild and no public exploit code.
Other vulnerabilities in Netgear D7800 Firmware
Sources
Also known as CVE-2021-45388, GHSA-6x83-8r8h-3w2x.