#VU85062 Stack-based buffer overflow in NETGEAR products

Vulnerability identifier: #VU85062

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: N/A

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
MR80
MS80
MK82
CBR750
RBRE960
RBSE960
RBKE962
MR70
MS70
MK72
MR60
MS60
MK62
RAX38v2
RAX48
RAX43
RAX50
RAX35v2
RAX45
RAX40v2
RAX50S
RAX42
RAXE500
RAXE450
RBR750
RBS750
RBK752
RBR850
RBS850
RBK852
RBR840
RBS840
RBK842

Software vendor:
NETGEAR

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A local administrator attacker can trigger stack-based buffer overflow and cause a denial of service condition on the target system.

Install updates from vendor's website.

• https://kb.netgear.com/000065939/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2019-0222