CVE-2018-21170: NETGEAR EX2700 Firmware

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX2700 before 1.0.1.28, R7800 before 1.0.2.40, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.

Affected products

  • NETGEAR EX2700 Firmware: before 1.0.1.28 (fixed in 1.0.1.28)
  • NETGEAR r7800 Firmware: before 1.0.2.40 (fixed in 1.0.2.40)
  • NETGEAR WN2000RPT Firmware: before 1.0.1.20 (fixed in 1.0.1.20)
  • NETGEAR WN3000RP Firmware: before 1.0.2.50 (fixed in 1.0.2.50)
  • NETGEAR WN3100RP Firmware: before 1.0.0.56 (fixed in 1.0.0.56)

Published 2020-04-27. Last modified 2026-06-17.