PT-2024-8369 · NetGear · Netgear R8500

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-50994

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Netgear R8500 version 1.0.2.160

Description The issue is related to multiple stack overflow vulnerabilities in the ipv6 fix.cgi component of the Netgear R8500 router. These vulnerabilities are caused by the lack of size checking for input data when handling the ipv6 wan ipaddr, ipv6 lan ipaddr, ipv6 wan length, and ipv6 lan length parameters. This allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the "ipv6 fix.cgi" endpoint.

Recommendations For Netgear R8500 version 1.0.2.160, consider disabling the ipv6 fix.cgi component until a patch is available to prevent exploitation of the stack overflow vulnerabilities. Restrict access to the vulnerable parameters ipv6 wan ipaddr, ipv6 lan ipaddr, ipv6 wan length, and ipv6 lan length to minimize the risk of a Denial of Service (DoS) attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09928

CVE-2024-50994

Affected Products

Netgear R8500

References · 8

• https://bdu.fstec.ru/vul/2024-09928 · Security Note
• https://netgear.com/about/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50994 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50994 · Vendor Advisory
• https://github.com/advisories/GHSA-927w-m77q-8hq6 · Note
• https://twitter.com/VulmonFeeds/status/1853891809652433099 · Twitter Post
• https://twitter.com/vuldb/status/1853850779347828886 · Twitter Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_36/36.md · Note, Deleted