CVE-2021-38517: NETGEAR r6400 Firmware

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and XR300 before 1.0.3.50.

Affected products

• NETGEAR r6400 Firmware: before 1.0.1.70 (fixed in 1.0.1.70)
• NETGEAR RAX75 Firmware: before 1.0.4.120 (fixed in 1.0.4.120)
• NETGEAR RAX80 Firmware: before 1.0.4.120 (fixed in 1.0.4.120)
• NETGEAR XR300 Firmware: before 1.0.3.50 (fixed in 1.0.3.50)

Published 2021-08-11. Last modified 2026-06-17.