Buffer overflow in NETGEAR products - #VU70561

Vulnerability identifier: #VU70561

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of servie (DoS) attack.

The vulnerability exists due to a boundary error. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.

EX6130
EX6120
MS70
MR70
MK72
RAX42
RAX43
RAX48
RAX45
RAX50
RAX50S
RAX38v2
RAX35v2
RAX40v2
RAXE450
RAXE500
MS80
MR80
MK83
LAX20
MK62
MR60
MS60
XR1000

Install updates from vendor's website.

EX6130 - update to 1.0.0.48
XR1000 - update to 1.0.0.64
EX6120 - update to 1.0.0.68
MS70 - update to 1.0.2.26
MR70 - update to 1.0.2.26
MK72 - update to 1.0.2.26
RAX42 - update to 1.0.10.110
RAX43 - update to 1.0.10.110
RAX48 - update to 1.0.10.110
RAX45 - update to 1.0.10.110
RAX50 - update to 1.0.10.110
RAX50S - update to 1.0.10.110
RAX38v2 - update to 1.0.10.110
RAX35v2 - update to 1.0.10.110
RAX40v2 - update to 1.0.10.110
RAXE450 - update to 1.0.11.94
RAXE500 - update to 1.0.11.94
MS80 - update to 1.1.6.14
MR80 - update to 1.1.6.14
MK83 - update to 1.1.6.14
LAX20 - update to 1.1.6.34
MK62 - update to 1.1.6.124
MR60 - update to 1.1.6.124
MS60 - update to 1.1.6.124

• https://kb.netgear.com/000065492/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2021-0275

• Denial of service in NETGEAR Routers, Extenders and WiFi Systems