PT-2020-10715 · NetGear · Dgnd2200Bv4+4

Published 2020-04-16 · Updated 2020-04-22 · CVE-2019-20740

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DGN2200v4 versions prior to 1.0.0.110 DGND2200Bv4 versions prior to 1.0.0.109 R7300 versions prior to 1.0.0.70 R8300 versions prior to 1.0.2.130 R8500 versions prior to 1.0.2.130

Description The issue is a stack-based buffer overflow that can be exploited by an authenticated user. This is a general information about the issue, and no specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are provided.

Recommendations For DGN2200v4 versions prior to 1.0.0.110, update to version 1.0.0.110 or later. For DGND2200Bv4 versions prior to 1.0.0.109, update to version 1.0.0.109 or later. For R7300 versions prior to 1.0.0.70, update to version 1.0.0.70 or later. For R8300 versions prior to 1.0.2.130, update to version 1.0.2.130 or later. For R8500 versions prior to 1.0.2.130, update to version 1.0.2.130 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-20740

Affected Products

Dgn2200V4

Dgnd2200Bv4

R7300

R8300

R8500

References · 4

• https://osv.dev/vulnerability/CVE-2019-20740 · Vendor Advisory
• https://kb.netgear.com/000060976/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20740 · Security Note
• https://t.me/cvenotify/2868 · Telegram Post