CVE Feed

    Dashboard / CVE / CVE-2021-34865

    CVE-2021-34865

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-13313.

    Published:Jan 25, 2022
    Last Modified:Nov 21, 2024
    EPS:Jan 25, 2022
    EPSS Score:0.00168
    CVSS Score:8.8

    Affected Products

    Vendor
    Netgear
    Product
    Ac2100
    Vendor
    Netgear
    Product
    Ac2100 Firmware
    Vendor
    Netgear
    Product
    Ac2400
    Vendor
    Netgear
    Product
    Ac2400 Firmware
    Vendor
    Netgear
    Product
    Ac2600
    Vendor
    Netgear
    Product
    Ac2600 Firmware
    Vendor
    Netgear
    Product
    D7000v1
    Vendor
    Netgear
    Product
    D7000v1 Firmware
    Vendor
    Netgear
    Product
    R6220
    Vendor
    Netgear
    Product
    R6220 Firmware
    Vendor
    Netgear
    Product
    R6230
    Vendor
    Netgear
    Product
    R6230 Firmware
    Vendor
    Netgear
    Product
    R6260
    Vendor
    Netgear
    Product
    R6260 Firmware
    Vendor
    Netgear
    Product
    R6330
    Vendor
    Netgear
    Product
    R6330 Firmware
    Vendor
    Netgear
    Product
    R6350
    Vendor
    Netgear
    Product
    R6350 Firmware
    Vendor
    Netgear
    Product
    R6700v2
    Vendor
    Netgear
    Product
    R6700v2 Firmware
    Vendor
    Netgear
    Product
    R6800
    Vendor
    Netgear
    Product
    R6800 Firmware
    Vendor
    Netgear
    Product
    R6850
    Vendor
    Netgear
    Product
    R6850 Firmware
    Vendor
    Netgear
    Product
    R6900v2
    Vendor
    Netgear
    Product
    R6900v2 Firmware
    Vendor
    Netgear
    Product
    R7200
    Vendor
    Netgear
    Product
    R7200 Firmware
    Vendor
    Netgear
    Product
    R7350
    Vendor
    Netgear
    Product
    R7350 Firmware
    Vendor
    Netgear
    Product
    R7400
    Vendor
    Netgear
    Product
    R7400 Firmware
    Vendor
    Netgear
    Product
    R7450
    Vendor
    Netgear
    Product
    R7450 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-114 Authentication Abuse
    CAPEC-115 Authentication Bypass
    CAPEC-120 Double Encoding
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-15 Command Delimiters
    CAPEC-151 Identity Spoofing
    CAPEC-182 Flash Injection
    CAPEC-194 Fake the Source of Data
    CAPEC-22 Exploiting Trust in Client
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-44 Overflow Binary Resource File
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
    CAPEC-593 Session Hijacking
    CAPEC-6 Argument Injection
    CAPEC-633 Token Impersonation
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-650 Upload a Web Shell to a Web Server
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities
    CAPEC-92 Forced Integer Overflow
    CAPEC-94 Adversary in the Middle (AiTM)

    Related CVEs

    CVE-2021-45511 (CVSS 6.8) — Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 b…
    CVE-2021-45534 (CVSS 7.8) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before…
    CVE-2021-45551 (CVSS 7.6) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before …
    CVE-2021-45573 (CVSS 8.3) — Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This aff…
    CVE-2021-45637 (CVSS 8.3) — Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This aff…
    CVE-2021-45644 (CVSS 6.8) — Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 befo…
    CVE-2021-45647 (CVSS 6.5) — Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.6…
    CVE-2021-45656 (CVSS 7.1) — Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 befo…
    CVE-2021-45657 (CVSS 7.1) — Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 befo…
    CVE-2021-45672 (CVSS 4.2) — Certain NETGEAR devices are affected by Stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High