Is CVE-2018-21163 actively exploited?

No active exploitation of CVE-2018-21163 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2018-21163 be exploited remotely?

Yes. CVE-2018-21163 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2018-21163?

CVE-2018-21163 has a CVSS score of 7.2 (HIGH).

HOME VULNERABILITIESCVE-2018-21163

HIGH

CVE-2018-21163

CWE-787Published: April 23, 2020· Updated: Jun 17, 2026

7.2

CVSS v3.1

Official Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.38, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6300v2 before 1.0.4.22, R6900P before 1.3.0.18, R7000P before 1.3.0.18, R7300DST before 1.0.0.62, R7900P before 1.3.0.10, R8000 before 1.0.4.12, R8000P before 1.3.0.10, WN2500RPv2 before 1.0.1.52, and WNDR3400v3 before 1.0.1.18.

NVD Source

Technical Analysis

CVE-2018-21163 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.2.

From a weakness classification perspective (CWE-787): Out-of-bounds write vulnerabilities can lead to data corruption, crashes, or arbitrary code execution.