PT-2008-2738 · NetGear+1 · Netgear Wn802T+1

Julien Tinnes + 1 · Published 2008-09-05 · Updated 2018-10-11 · CVE-2008-1144

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Marvell driver for the Netgear WN802T Wi-Fi access point version 1.3.16

Description The issue concerns the Marvell driver's improper parsing of EAPoL-Key packets, which can be exploited by remote authenticated users. This can lead to a denial of service, causing the device to reboot or hang, or potentially allow the execution of arbitrary code. The exploitation involves sending a malformed EAPoL-Key packet with a crafted advertised length.

Recommendations For version 1.3.16, consider disabling the handling of EAPoL-Key packets as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-1144

Affected Products

Marvell Driver

Netgear Wn802T

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-1144 · Security Note
• http://securityfocus.com/archive/1/495982/100/0/threaded · Note
• http://secunia.com/advisories/31770 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44919 · Note
• http://securityfocus.com/bid/31013 · Note
• http://securityreason.com/securityalert/4227 · Note