PT-2008-2790 · NetGear+1 · Netgear Wn802T+1

Published 2008-09-05 · Updated 2018-10-11 · CVE-2008-1197

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Marvell driver for Netgear WN802T Wi-Fi access point version 1.3.16

Description The issue is related to the improper parsing of the SSID information element in an association request. This can be exploited by remote authenticated users to cause a denial of service, resulting in a device reboot or hang, or potentially execute arbitrary code via a "Null SSID."

Recommendations For version 1.3.16, consider updating the firmware to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the network to minimize the risk of exploitation. Avoid using a Null SSID in the association request until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-1197

Affected Products

Marvell Driver

Netgear Wn802T

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-1197 · Security Note
• http://secunia.com/advisories/31770 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44918 · Note
• http://securityreason.com/securityalert/4215 · Note
• http://securityfocus.com/bid/30976 · Note
• http://securityfocus.com/archive/1/495983/100/0/threaded · Note