PT-2019-17406 · Kcodes+1 · Netusb.Ko+1

Dave Mcdaniel · Publicado 2019-06-17 · Atualizado 2022-06-13 · CVE-2019-5017

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetUSB.ko kernel module (affected versions not specified)

Description An information disclosure issue exists in the KCodes NetUSB.ko kernel module, which is used for the ReadySHARE Printer functionality in certain NETGEAR Nighthawk Routers and potentially other products. A remote, unauthenticated attacker can send a crafted packet with a specific opcode, causing the kernel module to disclose several addresses, one of which can be used to calculate the dynamic base address of the module, potentially leading to further exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-5017

Produtos afetados

Netgear Nighthawk Routers

Netusb.Ko

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-5017 · Aviso do Fabricante
• http://securityfocus.com/bid/108827 · Nota
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0776 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5017 · Nota de Segurança