CVE-2019-20640

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions prior to 1.0.0.76 NETGEAR D6000 versions prior to 1.0.0.76 NETGEAR D6200 versions prior to 1.1.00.32 NETGEAR D7000 versions prior to 1.0.1.68 NETGEAR JR6150 versions prior to 1.0.1.18 NETGEAR PR2000 versions prior to 1.0.0.28 NETGEAR R6020 versions prior to 1.0.0.38 NETGEAR R6050 versions prior to 1.0.1.18 NETGEAR R6080 versions prior to 1.0.0.38 NETGEAR R6120 versions prior to 1.0.0.46 NETGEAR R6220 versions prior to 1.1.0.80 NETGEAR R6260 versions prior to 1.1.0.40 NETGEAR R6700v2 versions prior to 1.2.0.36 NETGEAR R6800 versions prior to 1.2.0.36 NETGEAR R6900v2 versions prior to 1.2.0.36 NETGEAR WNR2020 versions prior to 1.1.0.62 NETGEAR XR500 versions prior to 2.3.2.32

Description The issue is a stack-based buffer overflow that can be exploited by an unauthenticated attacker. This allows for potential remote code execution or denial of service.

Recommendations Update D3600 to version 1.0.0.76 or later Update D6000 to version 1.0.0.76 or later Update D6200 to version 1.1.00.32 or later Update D7000 to version 1.0.1.68 or later Update JR6150 to version 1.0.1.18 or later Update PR2000 to version 1.0.0.28 or later Update R6020 to version 1.0.0.38 or later Update R6050 to version 1.0.1.18 or later Update R6080 to version 1.0.0.38 or later Update R6120 to version 1.0.0.46 or later Update R6220 to version 1.1.0.80 or later Update R6260 to version 1.1.0.40 or later Update R6700v2 to version 1.2.0.36 or later Update R6800 to version 1.2.0.36 or later Update R6900v2 to version 1.2.0.36 or later Update WNR2020 to version 1.1.0.62 or later Update XR500 to version 2.3.2.32 or later