PT-2020-10672 · NetGear · Netgear Gs752Tpp+3

Published 2020-04-16 · Updated 2020-04-22 · CVE-2019-20697

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR GS728TPPv2 versions prior to 6.0.0.48 NETGEAR GS728TPv2 versions prior to 6.0.0.48 NETGEAR GS750E versions prior to 1.0.1.4 NETGEAR GS752TPP versions prior to 6.0.0.48 NETGEAR GS752TPv2 versions prior to 6.0.0.48

Description The issue is a stack-based buffer overflow that can be exploited by an unauthenticated attacker.

Recommendations For NETGEAR GS728TPPv2 versions prior to 6.0.0.48, update to version 6.0.0.48 or later. For NETGEAR GS728TPv2 versions prior to 6.0.0.48, update to version 6.0.0.48 or later. For NETGEAR GS750E versions prior to 1.0.1.4, update to version 1.0.1.4 or later. For NETGEAR GS752TPP versions prior to 6.0.0.48, update to version 6.0.0.48 or later. For NETGEAR GS752TPv2 versions prior to 6.0.0.48, update to version 6.0.0.48 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-20697

Affected Products

Netgear Gs728Tpv2

Netgear Gs750E

Netgear Gs752Tpp

Netgear Gs752Tpv2

References · 3

• https://osv.dev/vulnerability/CVE-2019-20697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20697 · Security Note
• https://kb.netgear.com/000061232/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Switches-PSV-2019-0066 · Vendor Advisory