Buffer Overflow Flaw in NETGEAR Routers

CVE-2022-27641

Summary

The vulnerability in the NETGEAR R6700v3 router's NetUSB module poses a significant risk by allowing network-adjacent attackers to execute arbitrary code. This flaw arises from inadequate validation of user-supplied data, leading to an integer overflow that can occur before the allocation of a buffer. The lack of required authentication makes it particularly dangerous, enabling exploitation by attackers to run code with root-level privileges on the router.

References