PT-2020-8310 · NetGear · Netgear R8000

Aircut · Published 2020-04-22 · Updated 2020-04-24 · CVE-2017-18761

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N

Name of the Vulnerable Software and Affected Versions: NETGEAR R8000 versions prior to 1.0.4.2

Description: The issue is a stack-based buffer overflow that can be exploited by an authenticated user.

Recommendations: For versions prior to 1.0.4.2, update to version 1.0.4.2 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2017-18761

Affected Products

Netgear R8000

References · 5

• https://kb.netgear.com/000051484/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-R8000-PSV-2017-2229 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-18761 · Security Note
• https://t.me/cibsecurity/11538 · Telegram Post
• https://t.me/cvenotify/3030 · Telegram Post