Medium severity4.3NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026

CVE-2021-38526

Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Rax35 Firmware
cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.94
Netgear/Rax38 Firmware
cpe:2.3:o:netgear:rax38_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.94
Netgear/Rax40 Firmware
cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.94
Netgear/devicescpe-rescue
Netgear/RAX40llm-fuzzy
Range: <1.0.3.94
Netgear/RAX35llm-fuzzy
Range: <1.0.3.94
Netgear/RAX38llm-fuzzy
Range: <1.0.3.94

Patches

Vulnerability mechanics

References

kb.netgear.com/000063782/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0416nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000