Denial of service in NETGEAR Routers and WiFi Systems
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | N/A |
| CWE-ID | CWE-121 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
MR80 Hardware solutions / Routers & switches, VoIP, GSM, etc MS80 Hardware solutions / Routers & switches, VoIP, GSM, etc MK82 Hardware solutions / Routers & switches, VoIP, GSM, etc CBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBRE960 Hardware solutions / Routers & switches, VoIP, GSM, etc RBSE960 Hardware solutions / Routers & switches, VoIP, GSM, etc RBKE962 Hardware solutions / Routers & switches, VoIP, GSM, etc MR70 Hardware solutions / Routers & switches, VoIP, GSM, etc MS70 Hardware solutions / Routers & switches, VoIP, GSM, etc MK72 Hardware solutions / Routers & switches, VoIP, GSM, etc MR60 Hardware solutions / Routers & switches, VoIP, GSM, etc MS60 Hardware solutions / Routers & switches, VoIP, GSM, etc MK62 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX38v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX48 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50S Hardware solutions / Routers & switches, VoIP, GSM, etc RAX42 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE500 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE450 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK752 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK852 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK842 Hardware solutions / Routers & switches, VoIP, GSM, etc |
| Vendor | NETGEAR |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Stack-based buffer overflow
EUVDB-ID: #VU85062
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: N/A
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error. A local administrator attacker can trigger stack-based buffer overflow and cause a denial of service condition on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMR80: All versions
MS80: All versions
MK82: All versions
CBR750: All versions
RBRE960: All versions
RBSE960: All versions
RBKE962: All versions
MR70: All versions
MS70: All versions
MK72: All versions
MR60: All versions
MS60: All versions
MK62: All versions
RAX38v2: All versions
RAX48: All versions
RAX43: All versions
RAX50: All versions
RAX35v2: All versions
RAX45: All versions
RAX40v2: All versions
RAX50S: All versions
RAX42: All versions
RAXE500: All versions
RAXE450: All versions
RBR750: All versions
RBS750: All versions
RBK752: All versions
RBR850: All versions
RBS850: All versions
RBK852: All versions
RBR840: All versions
RBS840: All versions
RBK842: All versions
CPE2.3- cpe:2.3:h:netgear:mr80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk82:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbke962:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr70:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms70:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk72:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk62:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax38v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax48:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax43:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax35v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax45:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax40v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50s:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax42:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe500:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe450:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk752:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk852:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk842:*:*:*:*:*:*:*:*
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
