NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability
blog.viettelcybersecurity.com | vulnerability | CVE-2021-34982 | #rce | #netgear | #buffer-overflow | #bindiff | #router | #firmware-analysis | #cve-2021-34982
Summary
The author traces CVE-2021-34982 on NETGEAR R6700v3 to Create_Hashtable() in the httpd String File Table Upload handler: unvalidated gui_region overflows a stack buffer, enabling pre-auth root RCE.
- CVE
- CVE-2021-34982
- Published
- Collected
--- id: 7350 title: "NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability" cve: CVE-2021-34982 source_domain: blog.viettelcybersecurity.com source_url: "https://blog.viettelcybersecurity.com/netgear-r6700v3-1day-analysis-cve-2021-34982-buffer-overflow-rce-vulnerabiliy-2/" published_at: "2022-08-02T03:54:34Z" tags: ["rce", "netgear", "buffer-overflow", "bindiff", "router", "firmware-analysis", "cve-2021-34982"] phying_url: "https://phying.com/item/7350" lang: en --- # NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability ## Summary The author traces CVE-2021-34982 on NETGEAR R6700v3 to Create_Hashtable() in the httpd String File Table Upload handler: unvalidated gui_region overflows a stack buffer, enabling pre-auth root RCE. ## Intelligence Metadata - **Sources:** blog.viettelcybersecurity.com - **CVE:** CVE-2021-34982 - **Published:** 2022-08-02T03:54:34Z - **Original:** https://blog.viettelcybersecurity.com/netgear-r6700v3-1day-analysis-cve-2021-34982-buffer-overflow-rce-vulnerabiliy-2/ - **Phying News:** https://phying.com/item/7350