Buffer Overflow Vulnerability in NETGEAR WAC104 Devices by NETGEAR
CVE-2020-35788

7.6HIGH

Key Information:

Vendor

Netgear
Status
Wac104 Firmware
Vendor
CVE Published:
30 December 2020

What is CVE-2020-35788?

NETGEAR WAC104 devices prior to version 1.0.4.13 are susceptible to a buffer overflow vulnerability that can be exploited by authenticated users. This issue arises during post-authentication, potentially allowing attackers to manipulate the device's memory, leading to arbitrary code execution or service disruptions. It is crucial for users to update their devices to the latest firmware to mitigate this security risk.

References

https://kb.netgear.com/000062719/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.