Buffer Overflow Vulnerability in Netgear Router Products
CVE-2025-4115

8.7HIGH

Key Information:

Vendor

Netgear

Vendor
CVE Published:
30 April 2025

What is CVE-2025-4115?

A significant buffer overflow vulnerability has been identified in the Netgear JWNR2000v2 router, specifically in the 'default_version_is_new' function. This flaw allows for manipulation of the host argument, which can be exploited remotely to compromise the device. Despite early disclosure attempts to the vendor, no response was received, underscoring the need for users to evaluate their device security and consider immediate mitigation actions to prevent potential exploitation.

Affected Version(s)

JWNR2000v2 1.0.0.11

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yummysoup2 (VulDB User)
.