Denial of service in NETGEAR Routers, Extenders and WiFi Systems

Published: 2023-01-02

Risk	Medium
Patch available	YES
Number of vulnerabilities	1
CVE-ID	N/A
CWE-ID	CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	RAXE500 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE450 Hardware solutions / Routers & switches, VoIP, GSM, etc LAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc MK83 Hardware solutions / Routers & switches, VoIP, GSM, etc MR80 Hardware solutions / Routers & switches, VoIP, GSM, etc MS80 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX42 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX48 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50S Hardware solutions / Routers & switches, VoIP, GSM, etc RAX38v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc EX6120 Hardware solutions / Routers & switches, VoIP, GSM, etc EX6130 Hardware solutions / Routers & switches, VoIP, GSM, etc MK72 Hardware solutions / Routers & switches, VoIP, GSM, etc MR70 Hardware solutions / Routers & switches, VoIP, GSM, etc MS70 Hardware solutions / Routers & switches, VoIP, GSM, etc MK62 Hardware solutions / Routers & switches, VoIP, GSM, etc MR60 Hardware solutions / Routers & switches, VoIP, GSM, etc MS60 Hardware solutions / Routers & switches, VoIP, GSM, etc XR1000 Hardware solutions / Routers for home users
Vendor	NETGEAR

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Buffer overflow

EUVDB-ID: #VU70561

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: N/A

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of servie (DoS) attack.

The vulnerability exists due to a boundary error. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

RAXE500: All versions

RAXE450: All versions

LAX20: All versions

MK83: All versions

MR80: All versions

MS80: All versions

RAX42: All versions

RAX43: All versions

RAX48: All versions

RAX45: All versions

RAX50: All versions

RAX50S: All versions

RAX38v2: All versions

RAX35v2: All versions

RAX40v2: All versions

EX6120: All versions

EX6130: All versions

XR1000: All versions

MK72: All versions

MR70: All versions

MS70: All versions

MK62: All versions

MR60: All versions

MS60: All versions

CPE2.3

External links

https://kb.netgear.com/000065492/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2021-0275

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.