Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• netgear r6250 firmwarebefore 1.0.4.12
• netgear r6300 firmwarebefore 1.0.4.12
• netgear r6700 firmwarebefore 1.0.1.22
• netgear r6900 firmwarebefore 1.0.1.22
• netgear r7000 firmwarebefore 1.0.9.4
• netgear r7900 firmwarebefore 1.0.1.12
• netgear r8000 firmwarebefore 1.0.3.24
• netgear r8500 firmwarebefore 1.0.2.74

Other highest-scoring records for the same primary product.

• CVE-2023-33532There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48.
  44Plan
• CVE-2023-34563netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.
  43Plan
• CVE-2021-38519Certain NETGEAR devices are affected by command injection by an authenticated user.
  28Monitor
• CVE-2017-18741Certain NETGEAR devices are affected by incorrect configuration of security settings.
  26Monitor
• CVE-2017-18846Certain NETGEAR devices are affected by a stack-based buffer overflow.
  26Monitor
• CVE-2017-18789Certain NETGEAR devices are affected by disclosure of sensitive information.
  22Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.