PT-2020-8288 · NetGear · Netgear R6220+3

Lays · Published 2020-04-23 · Updated 2020-04-23 · CVE-2017-18739

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR R6220 versions prior to V1.1.0.50 NETGEAR R7800 versions prior to V1.0.2.36 NETGEAR WNDR3400v3 versions prior to 1.0.1.14 NETGEAR WNDR3700v5 versions prior to V1.1.0.48

Description: The issue is a buffer overflow that can be exploited by an unauthenticated attacker. This allows for potential remote code execution or denial of service.

Recommendations: For NETGEAR R6220 versions prior to V1.1.0.50, update to V1.1.0.50 or later. For NETGEAR R7800 versions prior to V1.0.2.36, update to V1.0.2.36 or later. For NETGEAR WNDR3400v3 versions prior to 1.0.1.14, update to 1.0.1.14 or later. For NETGEAR WNDR3700v5 versions prior to V1.1.0.48, update to V1.1.0.48 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2017-18739

Affected Products

Netgear R6220

Netgear R7800

Netgear Wndr3400V3

Netgear Wndr3700V5

References · 5

• https://kb.netgear.com/000051516/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2017-0670 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18739 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18739 · Vendor Advisory
• https://t.me/cvenotify/3125 · Telegram Post
• https://t.me/cibsecurity/11587 · Telegram Post