Evil-DB LogoEvil-DB
← All CVEs

CVE-2021-41314

high · 8.8

Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create (or overwrite) a file with specific content (e.g., the "2" string). This leads to admin session crafting and therefore gaining full web UI admin privileges by an unauthenticated attacker. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.

8.8
CVSS
13.6%
EPSS (exploit prob.)
96th
EPSS percentile
2021-09-16
Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-74

Affected products

VendorProductAffected versions
netgeargc108p_firmware< 1.0.8.2
netgeargc108pall versions
netgeargc108pp_firmware< 1.0.8.2
netgeargc108ppall versions
netgeargs108t_firmware< 7.0.7.2
netgeargs108tv3all versions
netgeargs110tpp_firmware< 7.0.7.2
netgeargs110tppall versions
netgeargs110tp_firmware< 7.0.7.2
netgeargs110tpv3
netgeargs110tup_firmware< 1.0.5.3
netgeargs110tupall versions
netgeargs308t_firmware< 1.0.3.2
netgeargs308tall versions
netgeargs310tp_firmware< 1.0.3.2
netgeargs310tpall versions
netgeargs710tup_firmware< 1.0.5.3
netgeargs710tupall versions
netgeargs716tp_firmware< 1.0.4.2
netgeargs716tpall versions
netgeargs716tpp_firmware< 1.0.4.2
netgeargs716tppall versions
netgeargs724tpp_firmware< 2.0.6.3
netgeargs724tppall versions
netgeargs724tp_firmware< 2.0.6.3
netgeargs724tpv2
netgeargs728tpp_firmware< 2.0.6.3
netgeargs728tppv2
netgeargs728tp_firmware< 2.0.6.3
netgeargs728tpv2
netgeargs750e_firmware< 1.0.1.10
netgeargs750eall versions
netgeargs752tpp_firmware< 6.0.8.2
netgeargs752tppall versions
netgeargs752tp_firmware< 6.0.8.2
netgeargs752tpv2
netgearms510txm_firmware< 1.0.4.2
netgearms510txmall versions
netgearms510txup_firmware< 1.0.4.2
netgearms510txupall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-41314