Buffer Overflow Vulnerability in Netgear Routers and Extenders

CVE-2023-39550

What is CVE-2023-39550?

Multiple buffer overflow vulnerabilities were identified in Netgear JWNR2000v2, XWN5001, and XAVN2001v2 devices. The issues arise through inadequately validated input parameters in the check_auth function, specifically impacting the http_passwd and http_username fields. Exploiting these vulnerabilities could allow unauthorized access and potential control over the affected devices, jeopardizing network security. Users are encouraged to update their firmware and follow security best practices to mitigate these risks.

References