PT-2020-8411 · NetGear · Netgear R7000P+10

Cees

·

Published

2020-05-05

·

Updated

2020-05-08

·

CVE-2017-18864

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions prior to 1.0.1.24 NETGEAR R6400v2 versions prior to 1.0.2.32 NETGEAR R6700 versions prior to 1.0.1.22 NETGEAR R6900 versions prior to 1.0.1.22 NETGEAR R7000 versions prior to 1.0.9.4 NETGEAR R7000P versions prior to 1.0.0.56 NETGEAR R6900P versions prior to 1.0.0.56 NETGEAR R7100LG versions prior to 1.0.0.32 NETGEAR R7300 versions prior to 1.0.0.54 NETGEAR R7900 versions prior to 1.0.1.18 NETGEAR R8300 versions prior to 1.0.2.104 NETGEAR R8500 versions prior to 1.0.2.104
Description: Certain NETGEAR devices are affected by a buffer overflow that can be exploited by an unauthenticated attacker.
Recommendations: For NETGEAR R6400, update to version 1.0.1.24 or later. For NETGEAR R6400v2, update to version 1.0.2.32 or later. For NETGEAR R6700, update to version 1.0.1.22 or later. For NETGEAR R6900, update to version 1.0.1.22 or later. For NETGEAR R7000, update to version 1.0.9.4 or later. For NETGEAR R7000P, update to version 1.0.0.56 or later. For NETGEAR R6900P, update to version 1.0.0.56 or later. For NETGEAR R7100LG, update to version 1.0.0.32 or later. For NETGEAR R7300, update to version 1.0.0.54 or later. For NETGEAR R7900, update to version 1.0.1.18 or later. For NETGEAR R8300, update to version 1.0.2.104 or later. For NETGEAR R8500, update to version 1.0.2.104 or later.

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2017-18864

Affected Products

Netgear R6400
Netgear R6400V2
Netgear R6700
Netgear R6900P
Netgear R7000
Netgear R7000P
Netgear R7100Lg
Netgear R7300
Netgear R7900
Netgear R8300
Netgear R8500