PT-2024-8256 · NetGear · Netgear Xr300+2

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-52023

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128

Description: The issue is related to a stack overflow vulnerability via the pppoe localip parameter at the "pppoe2.cgi" endpoint. This allows attackers to cause a Denial of Service (DoS) via a crafted POST request. The vulnerability is associated with a buffer copy without checking the size of the input data when processing the pppoe localip parameter, which can be exploited by a remote attacker to cause a service disruption by sending a specially formed POST request.

Recommendations: For Netgear XR300 version 1.0.3.78, consider disabling access to the "pppoe2.cgi" endpoint until a patch is available. For Netgear R7000P version 1.3.3.154, restrict the use of the pppoe localip parameter in the "pppoe2.cgi" endpoint to minimize the risk of exploitation. For Netgear R6400 v2 version 1.0.4.128, avoid using the pppoe localip parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09809

CVE-2024-52023

Affected Products

Netgear R6400V2

Netgear R7000P

Netgear Xr300

References · 7

• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52023 · Security Note
• https://bdu.fstec.ru/vul/2024-09809 · Security Note
• https://t.me/cvedetector/9872 · Telegram Post
• https://twitter.com/CVEnew/status/1853818925965799810 · Twitter Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md · Note, Deleted