Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNetgear D3600
HWNetgearall versionsNetgear D3600 Firmware
OSNetgear< 1.0.0.67Netgear D6000
HWNetgearall versionsNetgear D6000 Firmware
OSNetgear< 1.0.0.67Netgear D6100
HWNetgearall versionsNetgear D6100 Firmware
OSNetgear< 1.0.0.56Netgear D7800
HWNetgearall versionsNetgear D7800 Firmware
OSNetgear< 1.0.1.30Netgear R7500
HWNetgearv2Netgear R7500 Firmware
OSNetgear< 1.0.0.118< 1.0.3.24Netgear R7800
HWNetgearall versionsNetgear R7800 Firmware
OSNetgear< 1.0.2.40Netgear R9000
HWNetgearall versionsNetgear R9000 Firmware
OSNetgear< 1.0.2.52Netgear Wndr3700
HWNetgearv4Netgear Wndr3700 Firmware
OSNetgear< 1.0.2.96Netgear Wndr4300
HWNetgearv2Netgear Wndr4300 Firmware
OSNetgear< 1.0.0.50< 1.0.2.98Netgear Wndr4500
HWNetgearv3Netgear Wndr4500 Firmware
OSNetgear< 1.0.0.50Netgear Wnr2000
HWNetgearv5Netgear Wnr2000 Firmware
OSNetgear< 1.0.0.62
Related vulnerabilities
Buffer overflow w routerach NETGEAR WNR2000 umożliwia RCE bez uwierzytelnienia
Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia
Command Injection w NETGEAR WNR2000v4 przez SOAP over HTTP
NETGEAR — unauthenticated command injection w routerach i extenderach
NETGEAR — command injection bez uwierzytelnienia w routerach i extenderach