[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fak8tlDBN6Xchtanqvnp-ozISzVc75d_iWu1yF90Ec6w":3,"g5a-risk:CVE-2021-31802":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":51,"references":52,"referencesCount":51,"weaknesses":64,"weaknessesCount":73,"isActivelyExploited":74,"cisaInfo":26,"otxData":26,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":115,"notableEvents":116},"CVE-2021-31802","What is CVE-2021-31802?","NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \\n before the Content-Length header.","NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exist...","2021-04-26T13:15:07.787","2021-05-06T20:38:27.247",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",8.3,6.5,10,0.14177,[38,38,38,38,38,38,38],"High",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"netgear","r7000_firmware","*","cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"r7000","-","cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",2,[53,59],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fssd-disclosure.com\u002Fssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce\u002F","Ssd-disclosure",[57,58],"Exploit","Third Party Advisory",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fwww.netgear.com\u002Fabout\u002Fsecurity\u002F","Netgear",[63],"Vendor Advisory",[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2021-31802? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-31802, a high severity cyber security vulnerability from 2021. NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer O...","CVE-2021-31802, CVE-2021-31802 vulnerability, CVE-2021-31802 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, netgear security, r7000_firmware vulnerability, r7000 vulnerability","\u002Fwhat-is\u002Fcve-2021-31802",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-31802","Cybersecurity","CVE-2021-31802, CVE-2021-31802 vulnerability, CVE-2021-31802 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":103,"Negate":26,"Nodes":104},"AND",[105,111],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":110},"2C3E253B-84E1-4857-9C71-D3A0387989DA","1.0.11.116",{"Operator":106,"Negate":26,"CPEMatch":112},[113],{"Vulnerable":26,"Criteria":50,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C9F86FF6-AB32-4E51-856A-DDE790C0A9A6",[],[],{"lastModified":11,"cacheTime":118,"version":32},1792443237399,{"score":120,"band":121,"action":122,"scoredAt":123},50,"Medium","Plan remediation","2026-10-16T06:50:58.232443+00:00"]