CVE-2021-20166: NETGEAR RAX43 Firmware

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton.

Affected products

• NETGEAR RAX43 Firmware: version 1.0.3.96 only

Published 2021-12-30. Last modified 2026-06-17.