Buffer Overflow Vulnerability in NETGEAR R7000 Devices
CVE-2019-20758

7.4HIGH

Key Information:

Vendor

Netgear
Status
R7000 Firmware
Vendor
CVE Published:
16 April 2020

What is CVE-2019-20758?

NETGEAR R7000 devices prior to version 1.0.9.42 are susceptible to a buffer overflow vulnerability, which can be exploited by an authenticated user. This defect enables unauthorized access and manipulation of device memory, potentially resulting in the execution of arbitrary code or service disruptions. Users of affected devices are strongly advised to upgrade to the latest firmware to mitigate this risk and enhance their network security.

References

https://kb.netgear.com/000060641/Security-Advisory-for-Po...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.