PT-2023-15601 · NetGear · Netgear R7000P+3

Jean-Jamil Khalifé · Publicado 2023-01-30 · Atualizado 2025-03-28 · CVE-2022-48176

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear R7000P versions prior to 1.3.3.154 Netgear R6900P versions prior to 1.3.3.154 Netgear R7960P versions prior to 1.4.4.94 Netgear R8000P versions prior to 1.4.4.94

Description The issue is a pre-authentication stack overflow.

Recommendations For Netgear R7000P versions prior to 1.3.3.154, update to version 1.3.3.154 or later. For Netgear R6900P versions prior to 1.3.3.154, update to version 1.3.3.154 or later. For Netgear R7960P versions prior to 1.4.4.94, update to version 1.4.4.94 or later. For Netgear R8000P versions prior to 1.4.4.94, update to version 1.4.4.94 or later.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2022-48176

Produtos afetados

Netgear R6900P

Netgear R7000P

Netgear R7960P

Netgear R8000

Referências · 8

• https://t.me/cvenotify/116781 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-48176 · Nota de Segurança
• https://t.me/cvenotify/43860 · Publicação no Telegram
• https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146 · Aviso do Fabricante
• https://t.me/cibsecurity/57193 · Publicação no Telegram
• https://netgear.com/about/security · Aviso do Fabricante
• https://hdwsec.fr/blog/20221109-netgear · Nota
• https://osv.dev/vulnerability/CVE-2022-48176 · Aviso do Fabricante