PT-2024-8388 · NetGear · Netgear Xr300

Published 2024-10-28 · Updated 2025-05-02 · CVE-2024-51014

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Netgear XR300 version 1.0.3.78

Description The issue is related to a stack overflow vulnerability in the bridge wireless main.cgi script of the NETGEAR XR300 router's firmware when handling the ssid an parameter. This can be exploited by a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to the /bridge wireless main.cgi endpoint.

Recommendations For Netgear XR300 version 1.0.3.78, as a temporary workaround, consider restricting access to the bridge wireless main.cgi script until a patch is available. Avoid using the ssid an parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09947

CVE-2024-51014

Affected Products

Netgear Xr300

References · 8

• https://osv.dev/vulnerability/CVE-2024-51014 · Vendor Advisory
• https://netgear.com/about/security · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09947 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-51014 · Security Note
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_56/56.md · Note, Deleted
• https://github.com/advisories/GHSA-w2rm-ghcp-rwrp · Note
• https://twitter.com/CVEnew/status/1853818900414079035 · Twitter Post
• https://t.me/cvenotify/120646 · Telegram Post