PT-2019-17406 · Kcodes+1 · Netusb.Ko+1

Dave Mcdaniel · Published 2019-06-17 · Updated 2022-06-13 · CVE-2019-5017

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetUSB.ko kernel module (affected versions not specified)

Description An information disclosure issue exists in the KCodes NetUSB.ko kernel module, which is used for the ReadySHARE Printer functionality in certain NETGEAR Nighthawk Routers and potentially other products. A remote, unauthenticated attacker can send a crafted packet with a specific opcode, causing the kernel module to disclose several addresses, one of which can be used to calculate the dynamic base address of the module, potentially leading to further exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-5017

Affected Products

Netgear Nighthawk Routers

Netusb.Ko

References · 4

• https://osv.dev/vulnerability/CVE-2019-5017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5017 · Security Note
• http://securityfocus.com/bid/108827 · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0776 · Note