PT-2020-8247 · NetGear · Netgear R7800+2

Published 2020-04-24 · Updated 2020-04-28 · CVE-2017-18698

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR R6100 versions prior to 1.0.1.20 NETGEAR R7800 versions prior to 1.0.2.40 NETGEAR R9000 versions prior to 1.0.2.52

Description: The issue is a stack-based buffer overflow that can be exploited by an authenticated user. This allows for potential unauthorized access or control.

Recommendations: For NETGEAR R6100 versions prior to 1.0.1.20, update to version 1.0.1.20 or later. For NETGEAR R7800 versions prior to 1.0.2.40, update to version 1.0.2.40 or later. For NETGEAR R9000 versions prior to 1.0.2.52, update to version 1.0.2.52 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2017-18698

Affected Products

Netgear R6100

Netgear R7800

Netgear R9000

References · 5

• https://kb.netgear.com/000053204/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2626 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18698 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18698 · Vendor Advisory
• https://t.me/cvenotify/3201 · Telegram Post
• https://t.me/cibsecurity/11647 · Telegram Post