CVE-2018-21217: NETGEAR d3600 Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, and R6100 before 1.0.1.20.

Affected products

• NETGEAR d3600 Firmware: before 1.0.0.67 (fixed in 1.0.0.67)
• NETGEAR d6000 Firmware: before 1.0.0.67 (fixed in 1.0.0.67)
• NETGEAR d6100 Firmware: before 1.0.0.56 (fixed in 1.0.0.56)
• NETGEAR r6100 Firmware: before 1.0.1.20 (fixed in 1.0.1.20)

Published 2020-04-28. Last modified 2026-06-17.