^{CVE-2021-45528:}Post-Authentication Buffer Overflow Vulnerability in Multiple NETGEAR Router Models

Overview

This vulnerability is a post-authentication buffer overflow issue in several NETGEAR router models. Buffer overflow vulnerabilities occur when a program writes more data to a buffer than it can hold, potentially allowing attackers to execute arbitrary code or cause system crashes. In this case, an attacker would first need to authenticate to the router, making this a post-authentication vulnerability. Once authenticated, they could potentially exploit this buffer overflow to execute malicious code with elevated privileges, potentially taking complete control of the affected device. This vulnerability is particularly concerning for network infrastructure devices like routers, as they serve as gateways to entire networks.

Remediation

To address this vulnerability, users should update their NETGEAR router firmware to the following versions or later:

• R6300v2: Update to version 1.0.4.52 or later
• R6400: Update to version 1.0.1.52 or later
• R6900: Update to version 1.0.2.8 or later
• R7000: Update to version 1.0.9.88 or later
• R7900: Update to version 1.0.3.18 or later
• R8000: Update to version 1.0.4.46 or later
• R7900P: Update to version 1.4.1.50 or later
• R8000P: Update to version 1.4.1.50 or later
• RAX75: Update to version 1.0.3.88 or later
• RAX80: Update to version 1.0.3.88 or later
• WNR3500Lv2: Update to version 1.2.0.62 or later

Firmware updates can be downloaded from the NETGEAR support website or through the router's administrative interface. Additionally, users should ensure they're following security best practices such as:

• Using strong, unique passwords for router administration
• Disabling remote management if not needed
• Regularly checking for and applying firmware updates
• Considering network segmentation for critical devices

References

1. NETGEAR Security Advisory for Post-Authentication Buffer Overflow on Some Routers (PSV-2019-0069): https://kb.netgear.com/000064057/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0069

2. Common Weakness Enumeration (CWE-120): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'): https://cwe.mitre.org/data/definitions/120.html