CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2022-48322

CVSS 9.8v3.1pub. 2023-02-13upd. 2025-03-21

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Mr60

    HW
    Netgear
    all versions

  • Netgear Mr60 Firmware

    OS
    Netgear
    < 1.1.7.132

  • Netgear Ms60

    HW
    Netgear
    all versions

  • Netgear Ms60 Firmware

    OS
    Netgear
    < 1.1.7.132

  • Netgear R6900p

    HW
    Netgear
    all versions

  • Netgear R6900p Firmware

    OS
    Netgear
    < 1.3.3.154

  • Netgear R7000p

    HW
    Netgear
    all versions

  • Netgear R7000p Firmware

    OS
    Netgear
    < 1.3.3.154

  • Netgear R7960p

    HW
    Netgear
    all versions

  • Netgear R7960p Firmware

    OS
    Netgear
    < 1.4.4.94

  • Netgear R8000p

    HW
    Netgear
    all versions

  • Netgear R8000p Firmware

    OS
    Netgear
    < 1.4.4.94
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2023-36187CRITICAL9.8PL ✓same product

Buffer Overflow w NETGEAR R6400v2 — zdalne wykonanie kodu bez uwierzytelnienia

CVE-2022-44188CRITICAL9.8PL ✓same product

Buffer overflow w Netgear R7000P — parametr enable_band_steering

CVE-2022-44184CRITICAL9.8PL ✓same product

Buffer Overflow w Netgear R7000P — parametr wan_dns1_sec w httpd

CVE-2022-44186CRITICAL9.8PL ✓same product

Buffer Overflow w Netgear R7000P Firmware via parametr wan_dns1_pri

CVE-2022-44187CRITICAL9.8PL ✓same product

Buffer overflow w Netgear R7000P via wan_dns1_pri