PT-2023-4729 · NetGear · Netgear R6400V2

Swings · Published 2023-03-15 · Updated 2023-09-07 · CVE-2023-36187

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR R6400v2 versions prior to 1.0.4.118

Description The issue is related to a Buffer Overflow in the httpd service of the NETGEAR R6400v2 Wi-Fi router's firmware, which can be exploited by remote unauthenticated attackers to execute arbitrary code. This can be achieved via a crafted URL to the httpd service. The exploitation may allow a remote attacker to execute arbitrary code using a specially crafted malicious web page.

Recommendations For versions prior to 1.0.4.118, update to version 1.0.4.118 or later to resolve the issue. As a temporary workaround, consider restricting access to the httpd service until a patch is applied. Avoid using crafted URLs that may trigger the Buffer Overflow vulnerability in the httpd service.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2023-05160

CVE-2023-36187

Affected Products

Netgear R6400V2

References · 5

• https://osv.dev/vulnerability/CVE-2023-36187 · Vendor Advisory
• https://kb.netgear.com/000065571/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0578 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05160 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-36187 · Security Note
• https://t.me/cibsecurity/69658 · Telegram Post