Is CVE-2021-31802 actively exploited?

No active exploitation of CVE-2021-31802 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-31802 be exploited remotely?

Partially. CVE-2021-31802 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2021-31802?

CVE-2021-31802 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2021-31802

HIGH

CVE-2021-31802

CWE-787Published: April 26, 2021· Updated: Jun 17, 2026

8.8

CVSS v3.1

Official Description

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \n before the Content-Length header.

NVD Source

Technical Analysis

CVE-2021-31802 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.

From a weakness classification perspective (CWE-787): Out-of-bounds write vulnerabilities can lead to data corruption, crashes, or arbitrary code execution.