#VU29046 Stack-based buffer overflow in R6700
Published: June 16, 2020
Vulnerability identifier: #VU29046
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: N/A
CWE-ID: CWE-121
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerable software:
R6700
R6700
Software vendor:
NETGEAR
NETGEAR
Description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the UPnP service. A remote attacker on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system in the context of root.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.