CVE-2021-34236

9.8 criticalEPSS 1.5%

Critical (9.8) in netgear r8000 firmware. EPSS 1.5% chance of exploitation in the next 30 days.

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficiently long parameter 'register_country'.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2022-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netgear:r8000_firmware

References

https://github.com/Davidteeri/Bug-Report/blob/main/netgear-8000.md
https://github.com/advisories/GHSA-vfq9-7wg3-4mjx
https://github.com/Davidteeri/Bug-Report/blob/main/netgear-8000.md

Check your stack JSON