CVE-2021-27239
Estado: ModificadaAlta (8.8)—
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in an SSDP message can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11851.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.74%
- Percentil entre todas las CVEs puntuadas: 53
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (35)
Netgear — D6220 FirmwareNetgear — D6400 FirmwareNetgear — D7000 FirmwareNetgear — D8500 FirmwareNetgear — Dc112a FirmwareNetgear — Ex7000 FirmwareNetgear — Ex7500 FirmwareNetgear — R6250 FirmwareNetgear — R6300 FirmwareNetgear — R6400 FirmwareNetgear — R6700 FirmwareNetgear — R6900p FirmwareNetgear — R7000 FirmwareNetgear — R7000p FirmwareNetgear — R7100lg FirmwareNetgear — R7850 FirmwareNetgear — R7900 FirmwareNetgear — R7900p FirmwareNetgear — R7960p FirmwareNetgear — R8000 FirmwareNetgear — R8000p FirmwareNetgear — R8300 FirmwareNetgear — R8500 FirmwareNetgear — Rax200 FirmwareNetgear — Rax75 FirmwareNetgear — Rax80 FirmwareNetgear — Rbr750 FirmwareNetgear — Rbr850 FirmwareNetgear — Rbs40v FirmwareNetgear — Rbs750 FirmwareNetgear — Rbs850 FirmwareNetgear — Rs400 FirmwareNetgear — Wndr3400 FirmwareNetgear — Wnr3500l FirmwareNetgear — Xr300 Firmware
CWE
- CWE-121
Referencias
- https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432
- https://www.zerodayinitiative.com/advisories/ZDI-21-206/
- https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432
- https://www.zerodayinitiative.com/advisories/ZDI-21-206/
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-27239",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 8.3,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "zdi-disclosures@trendmicro.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "zdi-disclosures@trendmicro.com",
"affectedData": [
{
"vendor": "NETGEAR",
"product": "Multiple Routers",
"versions": [
{
"status": "affected",
"version": "firmware version 1.0.4.98"
}
]
}
]
}
],
"published": "2021-03-29T21:15:12.377",
"references": [
{
"url": "https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432",
"tags": [
"Vendor Advisory"
],
"source": "zdi-disclosures@trendmicro.com"
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-206/",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "zdi-disclosures@trendmicro.com"
},
{
"url": "https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-206/",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "zdi-disclosures@trendmicro.com",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in an SSDP message can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11851."
},
{
"lang": "es",
"value": "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los enrutadores NETGEAR R6400 y R6700 versión de firmware 1.0.4.98. No es requerida una autenticación para explotar esta vulnerabilidad. El fallo específico se presenta dentro del servicio upnpd, que escucha en el puerto UDP 1900 por defecto. Un campo de encabezado MX diseñado en un mensaje SSDP puede desencadenar un desbordamiento de un búfer en la región stack de la memoria de longitud corregida. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Era ZDI-CAN-11851"
}
],
"lastModified": "2026-06-17T03:44:31.490",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADF65DC4-51D5-4C38-B28D-7EA93B1734A3",
"versionEndExcluding": "1.0.0.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F3EEA190-2E9C-4586-BF81-B115532FBA23"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "888A8E0F-93DD-436D-B00C-F469C3BD6E5B",
"versionEndExcluding": "1.0.0.102"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D30939B-86E3-4C78-9B05-686B4994C8B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08668CFE-EE8B-4EE9-8B9D-FFCB45EE27D2",
"versionEndExcluding": "1.0.0.66"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d7000:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D8780623-F362-4FA5-8B33-37E9CB3FEE12"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "160F53B0-8430-4D85-8ABC-0A64B27DDFBD",
"versionEndExcluding": "1.0.3.60"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A59578F-1A3F-428B-A995-572C8E93C15C",
"versionEndExcluding": "1.0.0.54"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F87FFC46-137D-45B8-B437-F15565FB33D0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E273CF7-2DB6-4641-8753-810949D631B0",
"versionEndExcluding": "1.0.1.94"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9F45B620-60B8-40F3-A055-181ADD71EFFF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A9F4EEE-E2D2-42B2-BC5C-844055677C1C",
"versionEndExcluding": "1.0.0.72"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44336289-F9DA-4779-8C1A-0221E29E2E2F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "049629DD-9E4F-4F47-98B0-C9FD457B74A0",
"versionEndExcluding": "1.0.4.48"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "321BE843-52C4-4638-A321-439CA7B3A6F2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "685E2CA4-AA89-4574-8DB1-7C06D9F0FF2D",
"versionEndExcluding": "1.0.4.50"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "10938043-F7DF-42C3-8C16-F92CAF8E5576"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "930E739E-EFDC-49AB-9155-A71C2B25FCD6",
"versionEndExcluding": "1.0.1.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E02F15FF-76B1-43DD-85E0-A34E764E638D",
"versionEndExcluding": "1.0.4.102"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "357EDE1B-75BA-4515-B0E9-2B70EF993244",
"versionEndExcluding": "1.0.4.102"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5A09A9E8-8C77-4EDB-9483-B3C540EF083A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "839A9EBE-5F14-4695-8040-7D5607F8E248",
"versionEndExcluding": "1.3.2.132"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F1DAD0-F8B8-48D5-B571-C55636B274C3",
"versionEndExcluding": "1.0.11.116"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAF3EA40-79FB-4D2C-A8AF-A04820745C4D",
"versionEndExcluding": "1.3.2.132"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DFE55F4D-E98B-46D3-B870-041141934CD1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AC36017-5BCF-4CF6-91D0-278279943847",
"versionEndExcluding": "1.0.0.64"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "366FA778-3C2A-42AF-9141-DAD7043B406C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF7A1DF8-E9A0-4312-AC37-DEB46E37EE50",
"versionEndExcluding": "1.0.5.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DAF94D73-B6D0-4334-9A41-83AA92B7C6DF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96390A31-03B8-477B-8710-F797CB44E741",
"versionEndExcluding": "1.0.4.38"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAB3F350-9094-4B64-8ED9-517069EB56F4",
"versionEndExcluding": "1.4.1.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ECEE38A-B0BB-43F8-AB4D-26572B789BFB",
"versionEndExcluding": "1.4.1.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "091CEDB5-0069-4253-86D8-B9FE17CB9F24"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D10E41DC-982F-444A-9A4D-82EC2BA64199",
"versionEndExcluding": "1.0.4.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B39F095-8FE8-43FD-A866-7B613B495984"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61DF6302-36B7-49CF-8F2C-4C2247112EB9",
"versionEndExcluding": "1.4.1.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F7EF872D-2537-4FEB-8799-499FC9D44339"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60634A15-B02A-4C33-A1A4-F6340CFD6B8B",
"versionEndExcluding": "1.0.2.144"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8E565CF-8408-4502-97BD-01CEF15D0744",
"versionEndExcluding": "1.0.2.144"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "609B0EC8-FCD3-4522-A06A-7CB521586A22",
"versionEndExcluding": "1.0.2.88"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "58EB0F2F-FB5C-47D9-9AE6-087AE517B3F9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADDF0077-E02C-4DDA-A84E-DF3A0237FC66",
"versionEndExcluding": "1.0.3.102"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81DF924F-FDA4-4588-B8A3-6F18ABBD4976",
"versionEndExcluding": "1.0.3.102"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "06B5A85C-3588-4263-B9AD-4E56D3F6CB16"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C",
"versionEndExcluding": "3.2.17.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01E0EF50-145F-407A-8915-4EFFCD833505",
"versionEndExcluding": "3.2.17.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D92E4C8E-222A-476C-8273-F7171FC61F0B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CA086E1-DB23-4130-B746-D56F5A188C3B",
"versionEndExcluding": "2.6.2.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0D05F28-47A2-46AE-992E-132B34F6194B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165",
"versionEndExcluding": "3.2.17.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B529194C-C440-4BC3-850F-0613FC548F86"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DC5A075-0619-409C-B057-41015B8C54B3",
"versionEndExcluding": "3.2.17.12"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8509E165-B497-4483-95E6-7BEB2AB40946",
"versionEndIncluding": "1.5.0.68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2700644E-0940-4D05-B3CA-904D91739E58"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "065AE552-7268-45C5-92CA-B56602C9313D",
"versionEndExcluding": "1.0.1.38"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FCE2862-B111-45A9-85D9-8BABEFE4F856",
"versionEndExcluding": "1.2.0.66"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C8DE4BFA-41DE-4748-ACC7-14362333A059"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AF96D62-1D28-4FE5-AFC3-FB93A1BB4D45",
"versionEndExcluding": "1.0.3.56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5590CF28-B88A-4755-904B-1BC1778FBEDD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "zdi-disclosures@trendmicro.com"
}