PT-2020-8246
CVE-2017-18697
·
Published
2020-04-24
·
Updated
2020-04-28
Description by
CVSS 3.1
6.8
MediumMetricsAC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Name of the Vulnerable Software and Affected Versions:
NETGEAR R7800 versions prior to 1.0.2.40
NETGEAR R9000 versions prior to 1.0.2.52
Description:
The issue is a stack-based buffer overflow that can be exploited by an authenticated user. This is a general information about the problem, and no specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are provided. The buffer overflow occurs due to insufficient validation of user input, allowing an attacker to overflow the buffer and potentially execute arbitrary code.
Recommendations:
For NETGEAR R7800 versions prior to 1.0.2.40, update to version 1.0.2.40 or later to resolve the issue.
For NETGEAR R9000 versions prior to 1.0.2.52, update to version 1.0.2.52 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾