A buffer overflow flaw (CWE-787) allows an unauthenticated user who can reach the router over the local network to send crafted packets that crash the device, rendering it unavailable to legitimate traffic. The vulnerability is not tied to privileged remote access; it can be triggered simply by connecting to the router’s internal interfaces.

The vulnerability affects a group of NETGEAR routers including the RBR860, RBRE950, RBRE960, RBRE970, RBRE971, RBS860, RBSE950, and RBSE960. All firmware versions prior to V7.2.7.15 on the first seven models and prior to V9.10.1.4 on the RBRE970 and RBRE971 models are vulnerable.

The CVSS score of 4.9 indicates moderate severity, and the EPSS score is not available. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a local network connection from an unauthenticated user to the router’s management interfaces; the flaw does not require authentication. Exploitation results in a denial‑of‑service condition affecting all clients on the network.