Is CVE-2021-34947 actively exploited?

CVE-2021-34947 has no public evidence of in-the-wild exploitation as of 2025-08-14.

What is the CVSS score for CVE-2021-34947?

CVE-2021-34947 has a CVSS score of 8.8 (HIGH severity). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2021-34947?

Patch guidance is available from netgear security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2021-34947.

Fix CVE-2021-34947 - HIGH netgear d7800 firmware

Q: Which products are affected by CVE-2021-34947?

41 products: netgear d7800 firmware, netgear ex2700 firmware, netgear ex6100 firmware, netgear ex6150 firmware, netgear ex6200 firmware, and 36 more.

Description

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the soap_block_table file. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-13055.

CVSS Metrics

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: adjacent network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-787 · Out-of-bounds Write

Metadata

Primary Vendor: NETGEAR
Published: 5/7/2024
Last Modified: 8/14/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

netgear : d7800_firmwarenetgear : ex2700_firmwarenetgear : ex6100_firmwarenetgear : ex6150_firmwarenetgear : ex6200_firmwarenetgear : ex6250_firmwarenetgear : ex6400_firmwarenetgear : ex6400v2_firmwarenetgear : ex6410_firmwarenetgear : ex6420_firmwarenetgear : ex6500v1_firmwarenetgear : ex7300_firmwarenetgear : ex7300v2_firmwarenetgear : ex7320_firmwarenetgear : ex7700_firmwarenetgear : ex8000_firmwarenetgear : lbr1020_firmwarenetgear : lbr20_firmwarenetgear : r6700ax_firmwarenetgear : r7800_firmwarenetgear : r8900_firmwarenetgear : r9000_firmwarenetgear : rax10_firmwarenetgear : rax120_firmwarenetgear : rax120v2_firmwarenetgear : rax70_firmwarenetgear : rax78_firmwarenetgear : rbr10_firmwarenetgear : rbr20_firmwarenetgear : rbr40_firmwarenetgear : rbr50_firmwarenetgear : rbs10_firmwarenetgear : rbs20_firmwarenetgear : rbs40_firmwarenetgear : rbs50_firmwarenetgear : rbs50y_firmwarenetgear : wn3000rpv2_firmwarenetgear : wnr2000v5_firmwarenetgear : xr450_firmwarenetgear : xr500_firmwarenetgear : xr700_firmware

Remediation Guidance

Executive Summary

View on NIST NVD