Main Vulnerability Database Vulnerabilities #VU76456

Buffer overflow in NETGEAR products - CVE-2023-31070

Published: May 24, 2023 / Updated: March 7, 2025

Vulnerability identifier: #VU76456

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-31070

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to a boundary error. A local administrator can trigger memory corruption and execute arbitrary code on the target system.

Affected software

R6700
R6900
R7000
R7100LG
R7300DST
R7900
R8000
R8300
R8500

How to mitigate CVE-2023-31070

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Links to Public Exploits and PoC-codes

Exploit #11202 - cve-2023-31070 (CVE-2023-31070 Broadcom BCM47xx SDK slab-out-of-bounds write PoC) (March 7, 2025)

External References

https://kb.netgear.com/000065667/Security-Advisory-for-Post-authentication-Buffer-Overflow-on-Some-Routers-PSV-2023-0068

Related Security Bulletins

Buffer overflow in NETGEAR Routers