Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-27252 Details

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendor_specific DHCP opcode. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12216.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders	CVE	PatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-248/	CVE	Third Party AdvisoryVDB Entry
https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders	[email protected]	PatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-248/	[email protected]	Third Party AdvisoryVDB Entry

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]

Affected Products

Product	Versions
netgear br200 firmware	< 5.10.0.5
CPE cpe:2.3:o:netgear:br200_firmware:::::::: Remediation No remediation found in references.
netgear br200	All versions
CPE cpe:2.3:h:netgear:br200:-:::::::* Remediation No remediation found in references.
netgear br500 firmware	< 5.10.0.5
CPE cpe:2.3:o:netgear:br500_firmware:::::::: Remediation No remediation found in references.
netgear br500	All versions
CPE cpe:2.3:h:netgear:br500:-:::::::* Remediation No remediation found in references.
netgear d7800 firmware	< 1.0.1.60
CPE cpe:2.3:o:netgear:d7800_firmware:::::::: Remediation No remediation found in references.
netgear d7800	All versions
CPE cpe:2.3:h:netgear:d7800:-:::::::* Remediation No remediation found in references.
netgear ex6100v2 firmware	< 1.0.1.98
CPE cpe:2.3:o:netgear:ex6100v2_firmware:::::::: Remediation No remediation found in references.
netgear ex6100	v2
CPE cpe:2.3:h:netgear:ex6100:v2:::::::* Remediation No remediation found in references.
netgear ex6150 firmware	< 1.0.1.98
CPE cpe:2.3:o:netgear:ex6150_firmware:::::::: Remediation No remediation found in references.
netgear ex6150	v2
CPE cpe:2.3:h:netgear:ex6150:v2:::::::* Remediation No remediation found in references.
netgear ex6250 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex6250_firmware:::::::: Remediation No remediation found in references.
netgear ex6250	All versions
CPE cpe:2.3:h:netgear:ex6250:-:::::::* Remediation No remediation found in references.
netgear ex6400 firmware	< 1.0.2.158
CPE cpe:2.3:o:netgear:ex6400_firmware:::::::: Remediation No remediation found in references.
netgear ex6400	v2
CPE cpe:2.3:h:netgear:ex6400:-:::::::* cpe:2.3:h:netgear:ex6400:v2:::::::* Remediation No remediation found in references.
netgear ex6400v2 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex6400v2_firmware:::::::: Remediation No remediation found in references.
netgear ex6410 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex6410_firmware:::::::: Remediation No remediation found in references.
netgear ex6410	All versions
CPE cpe:2.3:h:netgear:ex6410:-:::::::* Remediation No remediation found in references.
netgear ex6420 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex6420_firmware:::::::: Remediation No remediation found in references.
netgear ex6420	All versions
CPE cpe:2.3:h:netgear:ex6420:-:::::::* Remediation No remediation found in references.
netgear ex7300 firmware	< 1.0.2.158
CPE cpe:2.3:o:netgear:ex7300_firmware:::::::: Remediation No remediation found in references.
netgear ex7300	v2
CPE cpe:2.3:h:netgear:ex7300:-:::::::* cpe:2.3:h:netgear:ex7300:v2:::::::* Remediation No remediation found in references.
netgear ex7300v2 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex7300v2_firmware:::::::: Remediation No remediation found in references.
netgear ex7320 firmware	< 1.0.0.134
CPE cpe:2.3:o:netgear:ex7320_firmware:::::::: Remediation No remediation found in references.
netgear ex7320	All versions
CPE cpe:2.3:h:netgear:ex7320:-:::::::* Remediation No remediation found in references.
netgear ex7700 firmware	< 1.0.0.216
CPE cpe:2.3:o:netgear:ex7700_firmware:::::::: Remediation No remediation found in references.
netgear ex7700	All versions
CPE cpe:2.3:h:netgear:ex7700:-:::::::* Remediation No remediation found in references.
netgear ex8000 firmware	< 1.0.1.232
CPE cpe:2.3:o:netgear:ex8000_firmware:::::::: Remediation No remediation found in references.
netgear ex8000	All versions
CPE cpe:2.3:h:netgear:ex8000:-:::::::* Remediation No remediation found in references.
netgear lbr20 firmware	< 2.6.3.50
CPE cpe:2.3:o:netgear:lbr20_firmware:::::::: Remediation No remediation found in references.
netgear lbr20	All versions
CPE cpe:2.3:h:netgear:lbr20:-:::::::* Remediation No remediation found in references.
netgear r7800 firmware	< 1.0.2.80
CPE cpe:2.3:o:netgear:r7800_firmware:::::::: Remediation No remediation found in references.
netgear r7800	All versions
CPE cpe:2.3:h:netgear:r7800:-:::::::* Remediation No remediation found in references.
netgear r8900 firmware	< 1.0.5.28
CPE cpe:2.3:o:netgear:r8900_firmware:::::::: Remediation No remediation found in references.
netgear r8900	All versions
CPE cpe:2.3:h:netgear:r8900:-:::::::* Remediation No remediation found in references.
netgear r9000 firmware	< 1.0.5.28
CPE cpe:2.3:o:netgear:r9000_firmware:::::::: Remediation No remediation found in references.
netgear r9000	All versions
CPE cpe:2.3:h:netgear:r9000:-:::::::* Remediation No remediation found in references.
netgear rbk12 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk12_firmware:::::::: Remediation No remediation found in references.
netgear rbk12	All versions
CPE cpe:2.3:h:netgear:rbk12:-:::::::* Remediation No remediation found in references.
netgear rbk13 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk13_firmware:::::::: Remediation No remediation found in references.
netgear rbk13	All versions
CPE cpe:2.3:h:netgear:rbk13:-:::::::* Remediation No remediation found in references.
netgear rbk14 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk14_firmware:::::::: Remediation No remediation found in references.
netgear rbk14	All versions
CPE cpe:2.3:h:netgear:rbk14:-:::::::* Remediation No remediation found in references.
netgear rbk15 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk15_firmware:::::::: Remediation No remediation found in references.
netgear rbk15	All versions
CPE cpe:2.3:h:netgear:rbk15:-:::::::* Remediation No remediation found in references.
netgear rbk20 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbk20_firmware:::::::: Remediation No remediation found in references.
netgear rbk20	All versions
CPE cpe:2.3:h:netgear:rbk20:-:::::::* Remediation No remediation found in references.
netgear rbk23 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk23_firmware:::::::: Remediation No remediation found in references.
netgear rbk23	All versions
CPE cpe:2.3:h:netgear:rbk23:-:::::::* Remediation No remediation found in references.
netgear rbk40 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbk40_firmware:::::::: Remediation No remediation found in references.
netgear rbk40	All versions
CPE cpe:2.3:h:netgear:rbk40:-:::::::* Remediation No remediation found in references.
netgear rbk43 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbk43_firmware:::::::: Remediation No remediation found in references.
netgear rbk43	All versions
CPE cpe:2.3:h:netgear:rbk43:-:::::::* Remediation No remediation found in references.
netgear rbk43s firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbk43s_firmware:::::::: Remediation No remediation found in references.
netgear rbk43s	All versions
CPE cpe:2.3:h:netgear:rbk43s:-:::::::* Remediation No remediation found in references.
netgear rbk44 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbk44_firmware:::::::: Remediation No remediation found in references.
netgear rbk44	All versions
CPE cpe:2.3:h:netgear:rbk44:-:::::::* Remediation No remediation found in references.
netgear rbk50 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk50_firmware:::::::: Remediation No remediation found in references.
netgear rbk50	All versions
CPE cpe:2.3:h:netgear:rbk50:-:::::::* Remediation No remediation found in references.
netgear rbk53 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbk53_firmware:::::::: Remediation No remediation found in references.
netgear rbk53	All versions
CPE cpe:2.3:h:netgear:rbk53:-:::::::* Remediation No remediation found in references.
netgear rbr10 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbr10_firmware:::::::: Remediation No remediation found in references.
netgear rbr10	All versions
CPE cpe:2.3:h:netgear:rbr10:-:::::::* Remediation No remediation found in references.
netgear rbr20 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbr20_firmware:::::::: Remediation No remediation found in references.
netgear rbr20	All versions
CPE cpe:2.3:h:netgear:rbr20:-:::::::* Remediation No remediation found in references.
netgear rbr40 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbr40_firmware:::::::: Remediation No remediation found in references.
netgear rbr40	All versions
CPE cpe:2.3:h:netgear:rbr40:-:::::::* Remediation No remediation found in references.
netgear rbr50 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbr50_firmware:::::::: Remediation No remediation found in references.
netgear rbr50	All versions
CPE cpe:2.3:h:netgear:rbr50:-:::::::* Remediation No remediation found in references.
netgear rbs10 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbs10_firmware:::::::: Remediation No remediation found in references.
netgear rbs10	All versions
CPE cpe:2.3:h:netgear:rbs10:-:::::::* Remediation No remediation found in references.
netgear rbs20 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbs20_firmware:::::::: Remediation No remediation found in references.
netgear rbs20	All versions
CPE cpe:2.3:h:netgear:rbs20:-:::::::* Remediation No remediation found in references.
netgear rbs40 firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbs40_firmware:::::::: Remediation No remediation found in references.
netgear rbs40	All versions
CPE cpe:2.3:h:netgear:rbs40:-:::::::* Remediation No remediation found in references.
netgear rbs50 firmware	< 2.7.2.104
CPE cpe:2.3:o:netgear:rbs50_firmware:::::::: Remediation No remediation found in references.
netgear rbs50	All versions
CPE cpe:2.3:h:netgear:rbs50:-:::::::* Remediation No remediation found in references.
netgear rbs50y firmware	< 2.6.2.104
CPE cpe:2.3:o:netgear:rbs50y_firmware:::::::: Remediation No remediation found in references.
netgear rbs50y	All versions
CPE cpe:2.3:h:netgear:rbs50y:-:::::::* Remediation No remediation found in references.
netgear xr450 firmware	< 2.3.2.114
CPE cpe:2.3:o:netgear:xr450_firmware:::::::: Remediation No remediation found in references.
netgear xr450	All versions
CPE cpe:2.3:h:netgear:xr450:-:::::::* Remediation No remediation found in references.
netgear xr500 firmware	< 2.3.2.114
CPE cpe:2.3:o:netgear:xr500_firmware:::::::: Remediation No remediation found in references.
netgear xr500	All versions
CPE cpe:2.3:h:netgear:xr500:-:::::::* Remediation No remediation found in references.
netgear xr700 firmware	< 1.0.1.38
CPE cpe:2.3:o:netgear:xr700_firmware:::::::: Remediation No remediation found in references.
netgear xr700	All versions
CPE cpe:2.3:h:netgear:xr700:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 27, 2021	Initial Analysis	[email protected]

CVE-2021-27252 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation