Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:rbk33:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductRbk33 (45c1110e-c227-5bf0-94a7-92c683a606a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27861 not_vulnerable 2026-06-08 05:23:53.381322 Details available
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.
Published: 2021-02-11T23:35:36.000Z
Updated: 2024-08-04T16:25:43.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.