PT-2020-10703 · NetGear · R6700+39

Aircut

·

Published

2020-04-16

·

Updated

2020-04-22

·

CVE-2019-20728

CVSS v3.1

6.7

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NETGEAR D6400 versions 1.0.0.0 through 1.0.0.73 NETGEAR D7000v2 versions 1.0.0.0 through 1.0.0.73 NETGEAR D7800 versions 1.0.0.0 through 1.0.1.33 NETGEAR D8500 versions 1.0.0.0 through 1.0.3.38 NETGEAR DGN2200v4 versions 1.0.0.0 through 1.0.0.101 NETGEAR DGND2200Bv4 versions 1.0.0.0 through 1.0.0.101 NETGEAR DM200 versions 1.0.0.0 through 1.0.0.51 NETGEAR JNDR3000 versions 1.0.0.0 through 1.0.0.21 NETGEAR RBK50 versions 2.3.5.0 through 2.3.5.29 NETGEAR RBR50 versions 2.3.5.0 through 2.3.5.29 NETGEAR RBS50 versions 2.3.5.0 through 2.3.5.29 NETGEAR RBW30 versions 2.1.2.0 through 2.1.2.5 NETGEAR R6250 versions 1.0.0.0 through 1.0.4.25 NETGEAR R6300v2 versions 1.0.0.0 through 1.0.4.23 NETGEAR R6400 versions 1.0.0.0 through 1.0.1.35 NETGEAR R6400v2 versions 1.0.0.0 through 1.0.2.51 NETGEAR R6700 versions 1.0.0.0 through 1.0.1.43 NETGEAR R6900 versions 1.0.0.0 through 1.0.1.43 NETGEAR R7000 versions 1.0.0.0 through 1.0.9.25 NETGEAR R6900P versions 1.0.0.0 through 1.3.0.19 NETGEAR R7000P versions 1.0.0.0 through 1.3.0.19 NETGEAR R7100LG versions 1.0.0.0 through 1.0.0.39 NETGEAR R7300DST versions 1.0.0.0 through 1.0.0.61 NETGEAR R7500v2 versions 1.0.0.0 through 1.0.3.25 NETGEAR R7800 versions 1.0.0.0 through 1.0.2.43 NETGEAR R7900 versions 1.0.0.0 through 1.0.2.9 NETGEAR R8000 versions 1.0.0.0 through 1.0.4.11 NETGEAR R7900P versions 1.0.0.0 through 1.3.0.9 NETGEAR R8000P versions 1.0.0.0 through 1.3.0.9 NETGEAR R8300 versions 1.0.0.0 through 1.0.2.115 NETGEAR R8500 versions 1.0.0.0 through 1.0.2.115 NETGEAR R8900 versions 1.0.0.0 through 1.0.3.9 NETGEAR R9000 versions 1.0.0.0 through 1.0.3.9 NETGEAR WNDR3400v3 versions 1.0.0.0 through 1.0.1.17 NETGEAR WNDR3700v4 versions 1.0.0.0 through 1.0.2.95 NETGEAR WNDR4300v1 versions 1.0.0.0 through 1.0.2.97 NETGEAR WNDR4300v2 versions 1.0.0.0 through 1.0.0.53 NETGEAR WNDR4500v3 versions 1.0.0.0 through 1.0.0.53 NETGEAR WNR2000v5 versions 1.0.0.0 through 1.0.0.63 NETGEAR WNR3500Lv2 versions 1.0.0.0 through 1.2.0.47
Description Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-20728

Affected Products

D6400
D7000V2
D7800
D8500
Dgn2200V4
Dgnd2200Bv4
Dm200
Jndr3000
R6250
R6300V2
R6400
R6400V2
R6700
R6900
R6900P
R7000
R7000P
R7100Lg
R7300Dst
R7500V2
R7800
R7900
R7900P
R8000
R8000P
R8300
R8500
R8900
R9000
Rbk50
Rbr50
Rbs50
Rbw30
Wndr3400V3
Wndr3700V4
Wndr4300V1
Wndr4300V2
Wndr4500V3
Wnr2000V5
Wnr3500Lv2