CVE-2018-21203: NETGEAR r6100 Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6100 before 1.0.1.20, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.

Affected products

• NETGEAR r6100 Firmware: before 1.0.1.20 (fixed in 1.0.1.20)
• NETGEAR r9000 Firmware: before 1.0.2.52 (fixed in 1.0.2.52)
• NETGEAR WNDR3700 Firmware: before 1.0.2.96 (fixed in 1.0.2.96)
• NETGEAR WNDR4300 Firmware: before 1.0.2.98 (fixed in 1.0.2.98); before 1.0.0.50 (fixed in 1.0.0.50)
• NETGEAR WNDR4500 Firmware: before 1.0.0.50 (fixed in 1.0.0.50)

Published 2020-04-28. Last modified 2026-06-17.