CVE-2018-21221: NETGEAR d3600 Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52.

Affected products

• NETGEAR d3600 Firmware: before 1.0.0.67 (fixed in 1.0.0.67)
• NETGEAR d6000 Firmware: before 1.0.0.67 (fixed in 1.0.0.67)
• NETGEAR r9000 Firmware: before 1.0.2.52 (fixed in 1.0.2.52)

Published 2020-04-28. Last modified 2026-06-17.