---
id: 7350
title: "NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability"
cve: CVE-2021-34982
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/netgear-r6700v3-1day-analysis-cve-2021-34982-buffer-overflow-rce-vulnerabiliy-2/"
published_at: "2022-08-02T03:54:34Z"
tags: ["rce", "netgear", "buffer-overflow", "bindiff", "router", "firmware-analysis", "cve-2021-34982"]
phying_url: "https://phying.com/item/7350"
lang: en
---

# NETGEAR R6700v3: 1day Analysis (CVE-2021-34982) Buffer Overflow RCE Vulnerability

## Summary

The author traces CVE-2021-34982 on NETGEAR R6700v3 to Create_Hashtable() in the httpd String File Table Upload handler: unvalidated gui_region overflows a stack buffer, enabling pre-auth root RCE.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2021-34982
- **Published:** 2022-08-02T03:54:34Z
- **Original:** https://blog.viettelcybersecurity.com/netgear-r6700v3-1day-analysis-cve-2021-34982-buffer-overflow-rce-vulnerabiliy-2/
- **Phying News:** https://phying.com/item/7350