PT-2020-8859 · NetGear · Netgear D6000+8
Mongo
·
Published
2020-04-28
·
Updated
2020-05-04
·
CVE-2018-21215
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NETGEAR D3600 versions prior to 1.0.0.67
NETGEAR D6000 versions prior to 1.0.0.67
NETGEAR D6100 versions prior to 1.0.0.56
NETGEAR EX2700 versions prior to 1.0.1.28
NETGEAR R7500v2 versions prior to 1.0.3.24
NETGEAR R9000 versions prior to 1.0.2.52
NETGEAR WN2000RPTv3 versions prior to 1.0.1.20
NETGEAR WN3000RPv3 versions prior to 1.0.2.50
NETGEAR WN3100RPv2 versions prior to 1.0.0.56
Description
The issue is a buffer overflow that can be exploited by an unauthenticated attacker. This allows the attacker to potentially execute arbitrary code on the affected device.
Recommendations
For NETGEAR D3600 versions prior to 1.0.0.67, update to version 1.0.0.67 or later.
For NETGEAR D6000 versions prior to 1.0.0.67, update to version 1.0.0.67 or later.
For NETGEAR D6100 versions prior to 1.0.0.56, update to version 1.0.0.56 or later.
For NETGEAR EX2700 versions prior to 1.0.1.28, update to version 1.0.1.28 or later.
For NETGEAR R7500v2 versions prior to 1.0.3.24, update to version 1.0.3.24 or later.
For NETGEAR R9000 versions prior to 1.0.2.52, update to version 1.0.2.52 or later.
For NETGEAR WN2000RPTv3 versions prior to 1.0.1.20, update to version 1.0.1.20 or later.
For NETGEAR WN3000RPv3 versions prior to 1.0.2.50, update to version 1.0.2.50 or later.
For NETGEAR WN3100RPv2 versions prior to 1.0.0.56, update to version 1.0.0.56 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear D3600
Netgear D6000
Netgear R6100
Netgear Ex2700
Netgear R7500V2
Netgear R9000
Netgear Wn2000Rptv3
Netgear Wn3000Rpv3
Netgear Wn3100Rpv2