PT-2024-8265 · NetGear · Netgear R7000P

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-52030

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Netgear R7000P version 1.3.3.154

Description The issue is related to a stack overflow in the ru wan flow.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service (DoS) by sending a crafted POST request. The vulnerability is due to a buffer copy without checking the size of the input data when handling the pptp user netmask parameter, which can be exploited by a remote attacker to cause a service disruption.

Recommendations For Netgear R7000P version 1.3.3.154, as a temporary workaround, consider restricting access to the ru wan flow.cgi script or disabling the pptp user netmask parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09818

CVE-2024-52030

Affected Products

Netgear R7000P

References · 8

• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-52030 · Security Note
• https://bdu.fstec.ru/vul/2024-09818 · Security Note
• https://t.me/cvedetector/9876 · Telegram Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_60/60.md · Note, Deleted
• https://github.com/advisories/GHSA-qmvj-5x98-pxr6 · Note
• https://twitter.com/CVEnew/status/1853818933880492301 · Twitter Post