Input validation error in NETGEAR products - #VU70563

Vulnerability identifier: #VU70563

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

EX6130
EX6120
R6700v3
RAX35v2
RAX38v2
RAX40v2
RAX45
RAX50
RAX43
RAX80
RAX75
RAXE500
RAXE450
MK83
MR80
MS80
LAX20
MS60
MR60
MK62
CAX80
XR1000
R6400v2
R7000
R7000P
R6900P

Install updates from vendor's website.

EX6130 - update to 1.0.0.46
XR1000 - update to 1.0.0.64
EX6120 - update to 1.0.0.66
R6400v2 - update to 1.0.4.122
R6700v3 - update to 1.0.4.122
RAX35v2 - update to 1.0.5.106
RAX38v2 - update to 1.0.5.106
RAX40v2 - update to 1.0.5.106
RAX45 - update to 1.0.5.106
RAX50 - update to 1.0.5.106
RAX43 - update to 1.0.5.106
RAX80 - update to 1.0.6.138
RAX75 - update to 1.0.6.138
RAXE500 - update to 1.0.8.70
RAXE450 - update to 1.0.8.70
R7000 - update to 1.0.11.130
MK83 - update to 1.1.6.14
MR80 - update to 1.1.6.14
MS80 - update to 1.1.6.14
LAX20 - update to 1.1.6.34
MS60 - update to 1.1.6.122
MR60 - update to 1.1.6.122
MK62 - update to 1.1.6.122
R7000P - update to 1.3.3.148
R6900P - update to 1.3.3.148
CAX80 - update to 2.1.4.2

• https://kb.netgear.com/000065490/Security-Advisory-for-Denial-of-Service-on-Some-Routers-and-WiFi-Systems-PSV-2021-0189

• Denial of service in NETGEAR Routers and WiFi Systems