PT-2024-8259 · NetGear · Netgear Xr300+2

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-52024

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128

Description: The issue is related to a stack overflow vulnerability via the pppoe localip parameter at the "wizpppoe.cgi" endpoint. This allows attackers to cause a Denial of Service (DoS) via a crafted POST request. The vulnerability is due to a buffer copy without checking the size of the input data when handling the pppoe localip parameter.

Recommendations: For Netgear XR300 version 1.0.3.78, consider disabling the wizpppoe.cgi endpoint until a patch is available. For Netgear R7000P version 1.3.3.154, restrict access to the wizpppoe.cgi endpoint to minimize the risk of exploitation. For Netgear R6400 v2 version 1.0.4.128, avoid using the pppoe localip parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09812

CVE-2024-52024

Affected Products

Netgear R6400V2

Netgear R7000P

Netgear Xr300

References · 7

• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52024 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09812 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52024 · Security Note
• https://t.me/cvedetector/9871 · Telegram Post
• https://twitter.com/CVEnew/status/1853818927169601582 · Twitter Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md · Note, Deleted