CVE-2021-34982 | Netgear DC112A httpd stack-based overflow (ZDI-21-1274)

A vulnerability has been found in Netgear DC112A, EX3700, EX3800, EX6120, EX6130, EX7000, EX7500, MR60, MR80, MS60, MS80, LAX20, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7100LG, R7850, R7900P, R7960P, R8000, R8000P, R8300, R8500, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAX75, RAX80, RAXE450, RAXE500, RS400, WNDR3400v3, WNR3500Lv2, XR1000, XR300, D6220, D6400, D7000v2, DGN2200v4 and V6510-1FXAUS and classified as critical. This vulnerability affects unknown code of the component httpd. The manipulation leads to stack-based buffer overflow.

This vulnerability was named CVE-2021-34982. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.