CVE-2021-34236: NETGEAR r8000 Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-service by sending a crafted POST to '/bd_genie_create_account.cgi' with a sufficiently long parameter 'register_country'.

Affected products

• NETGEAR r8000 Firmware: version 1.0.4.56 only

Published 2022-09-08. Last modified 2026-06-17.