PT-2008-2790 · NetGear+1 · Netgear Wn802T+1

Publicado 2008-09-05 · Atualizado 2018-10-11 · CVE-2008-1197

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Marvell driver for Netgear WN802T Wi-Fi access point version 1.3.16

Description The issue is related to the improper parsing of the SSID information element in an association request. This can be exploited by remote authenticated users to cause a denial of service, resulting in a device reboot or hang, or potentially execute arbitrary code via a "Null SSID."

Recommendations For version 1.3.16, consider updating the firmware to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the network to minimize the risk of exploitation. Avoid using a Null SSID in the association request until the issue is resolved.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-1197

Produtos afetados

Marvell Driver

Netgear Wn802T

Referências · 6

• http://secunia.com/advisories/31770 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1197 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44918 · Nota
• http://securityreason.com/securityalert/4215 · Nota
• http://securityfocus.com/bid/30976 · Nota
• http://securityfocus.com/archive/1/495983/100/0/threaded · Nota