CVE-2017-18726

HIGH

8.8

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published4/24/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

netgear:r6020netgear:r6020_firmwarenetgear:r6080netgear:r6080_firmwarenetgear:r6700netgear:r6700_firmwarenetgear:r6800netgear:r6800_firmwarenetgear:r6900netgear:r6900_firmware

Weaknesses (CWE)

CWE-787

References

https://kb.netgear.com/000051529/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2139(cve@mitre.org)

https://kb.netgear.com/000051529/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2139(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.