HIGH

CVE-2021-20166

CVSS v3

8.8

HIGH

EPSS Score

64.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton.

Technical details

Published
12/30/2021

Frequently asked questions

What is CVE-2021-20166?

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton.

Is CVE-2021-20166 actively exploited?

Active exploitation of CVE-2021-20166 has not been confirmed. The EPSS score is 64.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-20166?

CVE-2021-20166 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2021-20166 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.