PT-2024-8262 · NetGear · Netgear R7000P

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-52028

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154

Description: The issue is related to a stack overflow in the wiz pptp.cgi script of the Netgear R7000P router's firmware, specifically when handling the pptp user netmask parameter. This allows attackers to cause a Denial of Service (DoS) by sending a crafted POST request to the "/wiz pptp.cgi" endpoint. The vulnerability is due to a lack of input size validation when copying data into a buffer.

Recommendations: For Netgear R7000P version 1.3.3.154, as a temporary workaround, consider restricting access to the wiz pptp.cgi script to minimize the risk of exploitation. Avoid using the pptp user netmask parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09815

CVE-2024-52028

Affected Products

Netgear R7000P

References · 7

• https://netgear.com/about/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52028 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52028 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09815 · Security Note
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_60/60.md · Note, Deleted
• https://twitter.com/CVEnew/status/1853818931531657473 · Twitter Post
• https://t.me/cvedetector/9875 · Telegram Post