CVE-2024-52017

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78

Description: The issue is related to a buffer overflow in the bridge wireless main.cgi script of the Netgear XR300 router's firmware, specifically when handling the passphrase parameter. This can be exploited by sending a specially crafted POST request to cause a Denial of Service (DoS). The exploitation allows a remote attacker to cause the service to become unavailable.

Recommendations: For Netgear XR300 version 1.0.3.78, as a temporary workaround, consider restricting access to the bridge wireless main.cgi script until a patch is available. Avoid using the passphrase parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.