PT-2020-10726 · NetGear · Ex6150V2+16

Aircut · Published 2020-04-16 · Updated 2020-04-21 · CVE-2019-20751

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR D6100 versions prior to 1.0.0.60 NETGEAR DM200 versions prior to 1.0.0.61 NETGEAR EX2700 versions prior to 1.0.1.48 NETGEAR EX6100v2 versions prior to 1.0.1.76 NETGEAR EX6150v2 versions prior to 1.0.1.76 NETGEAR EX6200v2 versions prior to 1.0.1.72 NETGEAR EX8000 versions prior to 1.0.1.180 NETGEAR R7800 versions prior to 1.0.2.52 NETGEAR R8900 versions prior to 1.0.4.26 NETGEAR R9000 versions prior to 1.0.4.26 NETGEAR WN2000RPTv3 versions prior to 1.0.1.32 NETGEAR WN3000RPv2 versions prior to 1.0.0.68 NETGEAR WN3000RPv3 versions prior to 1.0.2.70 NETGEAR WN3100RPv2 versions prior to 1.0.0.66 NETGEAR WNDR4300v2 versions prior to 1.0.0.58 NETGEAR WNDR4500v3 versions prior to 1.0.0.58 NETGEAR WNR2000v5 versions prior to 1.0.0.68

Description A stack-based buffer overflow issue affects certain NETGEAR devices, allowing an authenticated user to potentially exploit this issue.

Recommendations Update D6100 to version 1.0.0.60 or later. Update DM200 to version 1.0.0.61 or later. Update EX2700 to version 1.0.1.48 or later. Update EX6100v2 to version 1.0.1.76 or later. Update EX6150v2 to version 1.0.1.76 or later. Update EX6200v2 to version 1.0.1.72 or later. Update EX8000 to version 1.0.1.180 or later. Update R7800 to version 1.0.2.52 or later. Update R8900 to version 1.0.4.26 or later. Update R9000 to version 1.0.4.26 or later. Update WN2000RPTv3 to version 1.0.1.32 or later. Update WN3000RPv2 to version 1.0.0.68 or later. Update WN3000RPv3 to version 1.0.2.70 or later. Update WN3100RPv2 to version 1.0.0.66 or later. Update WNDR4300v2 to version 1.0.0.58 or later. Update WNDR4500v3 to version 1.0.0.58 or later. Update WNR2000v5 to version 1.0.0.68 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-20751

Affected Products

D6100

Dm200

Ex2700

Ex6100V2

Ex6150V2

Ex6200V2

Ex8000

R7800

R8900

R9000

Wn2000Rptv3

Wn3000Rpv2

Wn3000Rpv3

Wn3100Rpv2

Wndr4300V2

Wndr4500V3

Wnr2000V5

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20751 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20751 · Vendor Advisory
• https://kb.netgear.com/000060964/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Extenders-Gateways-and-Routers-PSV-2018-0171 · Vendor Advisory