PT-2024-8365 · NetGear · Netgear R8500

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-50998

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160

Description The issue is related to multiple stack overflow vulnerabilities in the openvpn.cgi component of the Netgear R8500 router's firmware. These vulnerabilities are caused by uncontrolled copying of user input when handling the openvpn service port and openvpn service port tun parameters. This allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the affected API endpoint.

Recommendations For Netgear R8500 version 1.0.2.160, as a temporary workaround, consider disabling the openvpn.cgi component until a patch is available. Restrict access to the openvpn service port and openvpn service port tun parameters to minimize the risk of exploitation. Avoid using these parameters in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09924

CVE-2024-50998

Affected Products

Netgear R8500

References · 6

• https://bdu.fstec.ru/vul/2024-09924 · Security Note
• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-50998 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50998 · Security Note
• https://twitter.com/CVEnew/status/1853818880948412720 · Twitter Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_44/44.md · Note, Deleted