← Back

CVE-2017-18739

nvd nist
Published: Apr 23, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R7800 before V1.0.2.36, WNDR3400v3 before 1.0.1.14, and WNDR3700v5 before V1.1.0.48.

Affected (4)

Netgear
4 products
R6220 Firmware
R7800 Firmware
Wndr3400 Firmware
Wndr3700 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
R6220 Firmware
Before 1.1.0.50
Running on/withPlatform Versions
Netgear
R6220
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
R7800 Firmware
Before 1.0.2.36
Running on/withPlatform Versions
Netgear
R7800
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wndr3400 Firmware
Before 1.0.1.14
Running on/withPlatform Versions
Netgear
Wndr3400
Version v3
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wndr3700 Firmware
Before 1.1.0.48
Running on/withPlatform Versions
Netgear
Wndr3700
Version v5

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.