CVE-2021-31802: netgear r7000 Out-of-bounds Write

Vulnerability summary

CVE-2021-31802 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in netgear r7000. EPSS estimates a 14.18% chance of exploitation in the next 30 days, higher than 96.5% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 26-04-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \n before the Content-Length header.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.