Netgear remote code execution security vulnerability [CVE-2021-40847]

CVE number – CVE-2021-40847

Netgear has released security updates to address a remote code execution vulnerability in multiple NETGEAR routers. A remote attacker could exploit this vulnerability to take control of an affected system.

NETGEAR has released fixes for a remote code execution security vulnerability on the following product models:

• R6400v2
• R6700
• R6700v3
• R6900
• R6900P
• R7000
• R7000P
• R7850
• R7900
• R8000
• RS400

NETGEAR strongly recommends that you download the latest firmware as soon as possible. Firmware fixes are currently available for all affected products:

• R6400v2 fixed in firmware version 1.0.4.120
• R6700 fixed in firmware version 1.0.2.26
• R6700v3 fixed in firmware version 1.0.4.120
• R6900 fixed in firmware version 1.0.2.26
• R6900P fixed in firmware version 3.3.142_HOTFIX
• R7000 fixed in firmware version 1.0.11.128
• R7000P fixed in firmware version 1.3.3.142_HOTFIX
• R7850 fixed in firmware version 1.0.5.76
• R7900 fixed in firmware version 1.0.4.46
• R8000 fixed in firmware version 1.0.4.76
• RS400 fixed in firmware version 1.5.1.80

To download the updates visit https://www.netgear.com/support/

Duncan

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.