Stack-based buffer overflow in NETGEAR products - #VU69932

 

Stack-based buffer overflow in NETGEAR products - #VU69932

Published: December 6, 2022


Vulnerability identifier: #VU69932
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-121
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A local user can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

R6260
R6850
R6330
R6350
R6220
R6230

Remediation

Install updates from vendor's website.

R6260 - update to 1.1.0.88
R6850 - update to 1.1.0.88
R6330 - update to 1.1.0.88
R6350 - update to 1.1.0.88
R6220 - update to 1.1.0.114
R6230 - update to 1.1.0.114

External References

Related Security Bulletins