CVEvulnerability

CVE-2023-36187

9.8 CRITICAL Published 2023-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

Affected configurations

• netgear cbr40 firmware (< 2.5.0.24) • netgear lax20 firmware (< 1.1.6.34) • netgear mk62 firmware (< 1.1.6.122) • netgear mr60 firmware (< 1.1.6.122) • netgear ms60 firmware (< 1.1.6.122) • netgear rbw30 firmware (< 2.6.2.6) • netgear r6400 firmware (< 1.0.1.70) • netgear r6400v2 firmware (< 1.0.4.118) • netgear r6700v3 firmware (< 1.0.4.118) • netgear r7000 firmware (< 1.0.11.130) • netgear r7000p firmware (< 1.3.3.148) • netgear rax200 firmware (< 1.0.4.120) • netgear rax75 firmware (< 1.0.4.120) • netgear rax80 firmware (< 1.0.4.120) • netgear rs400 firmware (< 1.5.1.86)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References