Buffer overflow in NETGEAR Routers



Published: 2023-05-24
Risk Low
Patch available NO
Number of vulnerabilities 1
CVE-ID CVE-2023-31070
CWE-ID CWE-119
Exploitation vector Local
Public exploit N/A
Vulnerable software
Subscribe 		R6700
Hardware solutions / Routers for home users

R6900
Hardware solutions / Routers for home users

R7000
Hardware solutions / Routers for home users

R7100LG
Hardware solutions / Routers for home users

R7300DST
Hardware solutions / Routers for home users

R7900
Hardware solutions / Routers for home users

R8000
Hardware solutions / Routers for home users

R8300
Hardware solutions / Routers for home users

R8500
Hardware solutions / Routers for home users

Vendor NETGEAR

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Buffer overflow

EUVDB-ID: #VU76456

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2023-31070

CWE-ID:

Exploit availability:

Description

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to a boundary error. A local administrator can trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

R6700: All versions

R6900: All versions

R7000: All versions

R7100LG: All versions

R7300DST: All versions

R7900: All versions

R8000: All versions

R8300: All versions

R8500: All versions

Fixed software versions

CPE2.3 External links

http://kb.netgear.com/000065667/Security-Advisory-for-Post-authentication-Buffer-Overflow-on-Some-Routers-PSV-2023-0068


Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###