What’s Vulnerable › Vulnerabilities

CVE-2021-34236

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-08 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficiently long parameter 'register_country'.

Affected products

• NETGEAR R8000 Firmware: 1.0.4.56

References

• https://github.com/Davidteeri/Bug-Report/blob/main/netgear-8000.md
• https://github.com/advisories/GHSA-vfq9-7wg3-4mjx
• https://github.com/Davidteeri/Bug-Report/blob/main/netgear-8000.md

Get alerted when CVE-2021-34236 or the next vulnerability affects your stack