Security readout for executives and security teams
Plain-English summary
This vulnerability affects specific NETGEAR gateways and routers running older firmware. A logged-in high-privilege user could trigger a stack-based buffer overflow with potentially severe confidentiality, integrity, and availability impact. It is not listed in CISA KEV, and the provided sources do not show active exploitation.
Executive priority
Treat as a focused remediation item, not a broad emergency. Prioritize affected routers in business networks, remote offices, and executive home-office setups because compromise of routing equipment can disrupt operations and expose traffic.
Technical view
CVE-2018-21145 is a post-authentication stack-based buffer overflow in multiple NETGEAR router and gateway models. CVSS 3.0 is 6.8 with adjacent-network attack vector, low complexity, high privileges required, no user interaction, unchanged scope, and high C/I/A impact.
Likely exposure
Exposure is limited to listed NETGEAR models below the fixed firmware versions, especially unmanaged home office, branch, or small-office routers still in service. The CVE requires authenticated high-privilege access and an adjacent-network position per the provided CVSS vector.
Exploitation context
The bundle marks KEV as false and provides no cited evidence of active exploitation. The risk comes from post-authentication abuse: if an administrator account is compromised or misused, the vulnerability could have high device impact.
Researcher notes
Evidence is limited to the CVE record and NETGEAR advisory reference. No CWE, exploit evidence, or detailed root-cause notes are included in the bundle. Avoid assuming unauthenticated or internet-scale exploitation from the provided data.
Mitigation direction
- Upgrade each affected NETGEAR model to the fixed firmware version or newer.
- Review NETGEAR advisory PSV-2017-3160 for model-specific firmware guidance.
- Remove or replace affected devices that cannot be updated.
- Restrict router administration to trusted networks and named administrators.
- Review administrator account hygiene and disable unused privileged accounts.
Validation and detection
- Inventory for the NETGEAR models named in the CVE description.
- Compare installed firmware against the fixed versions listed in the advisory.
- Confirm administrative interfaces are not broadly reachable from untrusted networks.
- Review router administrator accounts for unnecessary or shared privileged access.
- Check vendor guidance for any additional model-specific validation notes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-21145 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.8 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N0.95.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.8MediumVector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000059488/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Gateways-and-Routers-PSV-2017-3160CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.