PT-2020-8246 · NetGear · Netgear R7800+1
Published
2020-04-24
·
Updated
2020-04-28
·
CVE-2017-18697
CVSS v3.1
6.8
Medium
| Vector | AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N |
Name of the Vulnerable Software and Affected Versions:
NETGEAR R7800 versions prior to 1.0.2.40
NETGEAR R9000 versions prior to 1.0.2.52
Description:
The issue is a stack-based buffer overflow that can be exploited by an authenticated user. This is a general information about the problem, and no specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are provided. The buffer overflow occurs due to insufficient validation of user input, allowing an attacker to overflow the buffer and potentially execute arbitrary code.
Recommendations:
For NETGEAR R7800 versions prior to 1.0.2.40, update to version 1.0.2.40 or later to resolve the issue.
For NETGEAR R9000 versions prior to 1.0.2.52, update to version 1.0.2.52 or later to resolve the issue.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear R7800
Netgear R9000