CRITICAL🇵🇱 Wersja polska

CVE-2023-30280

CVSS 9.8v3.1pub. 2023-04-26upd. 2025-02-03

Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear R6700

    HW
    Netgear
    v3

  • Netgear R6700 Firmware

    OS
    Netgear
    1.0.0.261.0.4.128

  • Netgear R6900

    HW
    Netgear
    all versions

  • Netgear R6900 Firmware

    OS
    Netgear
    1.0.2.26
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2021-38516CRITICAL10.0PL ✓same product

Brak kontroli dostępu na poziomie funkcji w urządzeniach NETGEAR

CVE-2021-29068CRITICAL9.9PL ✓same product

NETGEAR — buffer overflow po uwierzytelnieniu w dziesiątkach modeli routerów

CVE-2020-35795CRITICAL9.8PL ✓same product

Buffer overflow bez uwierzytelnienia w urządzeniach NETGEAR (routery, Orbi)

CVE-2020-26908CRITICAL9.4PL ✓same product

Authentication Bypass w urządzeniach NETGEAR — modemy i routery

CVE-2020-26927CRITICAL9.4PL ✓same product

Authentication bypass w urządzeniach NETGEAR — routery i modemy