CVE:CVE-2021-34991
CNNVD:CNNVD-202111-1078
Netgear NETGEAR R6400v2是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。
NETGEAR R6400v2存在缓冲区错误漏洞，该漏洞源于 UPnP 服务默认侦听 TCP 端口 5000。在解析 uuid 请求标头时，该进程在将用户提供的数据复制到固定长度的基于堆栈的缓冲区之前没有正确验证它的长度。攻击者可以利用该漏洞在 root 环境中执行代码。
solution:Upgrade netgear ex3700_firmware to a higher version than 1.0.0.94,and avoid the version (,1.0.0.94); Upgrade netgear ex3800_firmware to a higher version than 1.0.0.94,and avoid the version (,1.0.0.94); Upgrade netgear ex6120_firmware to a higher version than 1.0.0.66,and avoid the version (,1.0.0.66); Upgrade netgear ex6130_firmware to a higher version than 1.0.0.66,and avoid the version (,1.0.0.66); Upgrade netgear r6400_firmware to a higher version than 1.0.1.76,and avoid the version (,1.0.1.76); Upgrade netgear r6400v2_firmware to a higher version than 1.0.4.120,and avoid the version (,1.0.4.120); Upgrade netgear r6700v3_firmware to a higher version than 1.0.4.120,and avoid the version (,1.0.4.120); Upgrade netgear r6900p_firmware to a higher version than 1.3.3.142,and avoid the version (,1.3.3.142); Upgrade netgear r7000_firmware to a higher version than 1.0.11.128,and avoid the version (,1.0.11.128); Upgrade netgear r7000p_firmware to a higher version than 1.3.3.142,and avoid the version (,1.3.3.142); Upgrade netgear r7100lg_firmware to a higher version than 1.0.0.72,and avoid the version (,1.0.0.72); Upgrade netgear r7850_firmware to a higher version than 1.0.5.76,and avoid the version (,1.0.5.76); Upgrade netgear r7900p_firmware to a higher version than 1.4.2.84,and avoid the version (,1.4.2.84); Upgrade netgear r7960p_firmware to a higher version than 1.4.2.84,and avoid the version (,1.4.2.84); Upgrade netgear r8000_firmware to a higher version than 1.0.4.76,and avoid the version (,1.0.4.76); Upgrade netgear r8000p_firmware to a higher version than 1.4.2.84,and avoid the version (,1.4.2.84); Upgrade netgear r8300_firmware to a higher version than 1.0.2.156,and avoid the version (,1.0.2.156); Upgrade netgear r8500_firmware to a higher version than 1.0.2.156,and avoid the version (,1.0.2.156); Upgrade netgear rax15_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax20_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax200_firmware to a higher version than 1.0.5.132,and avoid the version (,1.0.5.132); Upgrade netgear rax35v2_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax38v2_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax40v2_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax42_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax43_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax45_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax48_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax50_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax50s_firmware to a higher version than 1.0.4.100,and avoid the version (,1.0.4.100); Upgrade netgear rax75_firmware to a higher version than 1.0.5.132,and avoid the version (,1.0.5.132); Upgrade netgear rax80_firmware to a higher version than 1.0.5.132,and avoid the version (,1.0.5.132); Upgrade netgear raxe450_firmware to a higher version than 1.0.8.70,and avoid the version (,1.0.8.70); Upgrade netgear raxe500_firmware to a higher version than 1.0.8.70,and avoid the version (,1.0.8.70); Upgrade netgear rs400_firmware to a higher version than 1.5.1.80,and avoid the version (,1.5.1.80); Upgrade netgear wndr3400v3_firmware to a higher version than 1.0.1.42,and avoid the version (,1.0.1.42); Upgrade netgear wnr3500lv2_firmware to a higher version than 1.2.0.70,and avoid the version (,1.2.0.70); Upgrade netgear xr300_firmware to a higher version than 1.0.3.68,and avoid the version (,1.0.3.68); Upgrade netgear d6220_firmware to a higher version than 1.0.0.76,and avoid the version (,1.0.0.76); Upgrade netgear d6400_firmware to a higher version than 1.0.0.108,and avoid the version (,1.0.0.108); Upgrade netgear d7000v2_firmware to a higher version than 1.0.0.76,and avoid the version (,1.0.0.76); Upgrade netgear dgn2200v4_firmware to a higher version than 1.0.0.126,and avoid the version (,1.0.0.126); Upgrade netgear dc112a_firmware to a higher version than 1.0.0.62,and avoid the version (,1.0.0.62); Upgrade netgear cax80_firmware to a higher version than 2.1.3.5,and avoid the version (,2.1.3.5)