HIGH

CVE-2021-31802

CVSS v3

8.8

HIGH

EPSS Score

19.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \\n before the Content-Length header.

Technical details

Published
4/26/2021

Frequently asked questions

What is CVE-2021-31802?

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \\n before the Content-Length header.

Is CVE-2021-31802 actively exploited?

Active exploitation of CVE-2021-31802 has not been confirmed. The EPSS score is 19.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-31802?

CVE-2021-31802 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2021-31802 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.