CVE-2018-21150

Vulnerability

A stack-based buffer overflow vulnerability exists in the firmware of multiple NETGEAR gateway and router models when processing input from an authenticated user. Affected devices include D7800 (before 1.0.1.34), DM200 (before 1.0.0.50), R6100 (before 1.0.1.22), R7500 (before 1.0.0.122), R7500v2 (before 1.0.3.26), R7800 (before 1.0.2.42), R8900 (before 1.0.3.10), R9000 (before 1.0.3.10), WNDR3700v4 (before 1.0.2.96), WNDR4300 (before 1.0.2.98), WNDR4300v2 (before 1.0.0.54), WNDR4500v3 (before 1.0.0.54), and WNR2000v5 (before 1.0.0.64) [1].

Exploitation

An attacker must first authenticate to the device's web interface or management service. After authentication, the attacker can send a specially crafted request that triggers a stack-based buffer overflow. The exact input vector is not publicly detailed, but the vulnerability is reachable through normal authenticated operations [1].

Impact

Successful exploitation could allow an authenticated attacker to cause a denial of service by crashing the device or potentially execute arbitrary code with elevated privileges, compromising the device's integrity and availability [1].

Mitigation

NETGEAR has released firmware updates for all affected models. Users should update to the latest firmware version as specified in the advisory [1]. No workarounds are provided; updating firmware is the recommended mitigation.