CVE Feed

    Dashboard / CVE / CVE-2020-27861

    CVE-2020-27861

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.

    Published:Feb 11, 2021
    Last Modified:Nov 21, 2024
    EPS:Feb 11, 2021
    EPSS Score:0.00133
    CVSS Score:8.8

    Affected Products

    Vendor
    Netgear
    Product
    Cbk40
    Vendor
    Netgear
    Product
    Cbk40 Firmware
    Vendor
    Netgear
    Product
    Cbk43
    Vendor
    Netgear
    Product
    Cbk43 Firmware
    Vendor
    Netgear
    Product
    Cbr40
    Vendor
    Netgear
    Product
    Cbr40 Firmware
    Vendor
    Netgear
    Product
    Ex6200
    Vendor
    Netgear
    Product
    Ex6200 Firmware
    Vendor
    Netgear
    Product
    Ex7700
    Vendor
    Netgear
    Product
    Ex7700 Firmware
    Vendor
    Netgear
    Product
    Ex8000
    Vendor
    Netgear
    Product
    Ex8000 Firmware
    Vendor
    Netgear
    Product
    Rbk12
    Vendor
    Netgear
    Product
    Rbk12 Firmware
    Vendor
    Netgear
    Product
    Rbk13
    Vendor
    Netgear
    Product
    Rbk13 Firmware
    Vendor
    Netgear
    Product
    Rbk14
    Vendor
    Netgear
    Product
    Rbk14 Firmware
    Vendor
    Netgear
    Product
    Rbk15
    Vendor
    Netgear
    Product
    Rbk15 Firmware
    Vendor
    Netgear
    Product
    Rbk20
    Vendor
    Netgear
    Product
    Rbk20 Router Firmware
    Vendor
    Netgear
    Product
    Rbk20 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk20w
    Vendor
    Netgear
    Product
    Rbk20w Firmware
    Vendor
    Netgear
    Product
    Rbk22
    Vendor
    Netgear
    Product
    Rbk22 Router Firmware
    Vendor
    Netgear
    Product
    Rbk22 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk23
    Vendor
    Netgear
    Product
    Rbk23 Router Firmware
    Vendor
    Netgear
    Product
    Rbk23 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk23w
    Vendor
    Netgear
    Product
    Rbk23w Firmware
    Vendor
    Netgear
    Product
    Rbk30
    Vendor
    Netgear
    Product
    Rbk30 Firmware
    Vendor
    Netgear
    Product
    Rbk33
    Vendor
    Netgear
    Product
    Rbk33 Firmware
    Vendor
    Netgear
    Product
    Rbk40
    Vendor
    Netgear
    Product
    Rbk40 Router Firmware
    Vendor
    Netgear
    Product
    Rbk40 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk43
    Vendor
    Netgear
    Product
    Rbk43 Router Firmware
    Vendor
    Netgear
    Product
    Rbk43 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk43s
    Vendor
    Netgear
    Product
    Rbk43s Router Firmware
    Vendor
    Netgear
    Product
    Rbk43s Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk44
    Vendor
    Netgear
    Product
    Rbk44 Router Firmware
    Vendor
    Netgear
    Product
    Rbk44 Satellite Firmware
    Vendor
    Netgear
    Product
    Rbk50
    Vendor
    Netgear
    Product
    Rbk50 Firmware
    Vendor
    Netgear
    Product
    Rbk50v
    Vendor
    Netgear
    Product
    Rbk50v Firmware
    Vendor
    Netgear
    Product
    Rbk52w
    Vendor
    Netgear
    Product
    Rbk52w Firmware
    Vendor
    Netgear
    Product
    Rbr10
    Vendor
    Netgear
    Product
    Rbr10 Firmware
    Vendor
    Netgear
    Product
    Rbr20
    Vendor
    Netgear
    Product
    Rbr20 Firmware
    Vendor
    Netgear
    Product
    Rbr40
    Vendor
    Netgear
    Product
    Rbr40 Firmware
    Vendor
    Netgear
    Product
    Rbr50
    Vendor
    Netgear
    Product
    Rbr50 Firmware
    Vendor
    Netgear
    Product
    Rbs10
    Vendor
    Netgear
    Product
    Rbs10 Firmware
    Vendor
    Netgear
    Product
    Rbs20
    Vendor
    Netgear
    Product
    Rbs20 Firmware
    Vendor
    Netgear
    Product
    Rbs40
    Vendor
    Netgear
    Product
    Rbs40 Firmware
    Vendor
    Netgear
    Product
    Rbs50
    Vendor
    Netgear
    Product
    Rbs50 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High