CVE-2009-0052

Severity Score

5.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Atheros wireless driver, as used in Netgear WNDAP330 Wi-Fi access point with firmware 2.1.11 and other versions before 3.0.3 on the Atheros AR9160-BC1A chipset, and other products, allows remote authenticated users to cause a denial of service (device reboot or hang) and possibly execute arbitrary code via a truncated reserved management frame.

El driver inalámbrico Atheros, tal como es usado en el punto de acceso Wi-Fi Netgear WNDAP330 con firmware 2.1.11 y otras versiones anteriores a la 3.0.3 en el chipset Atheros AR9160-BC1A, y otros productos, permite a usuarios remotos autenticados provocar una denagación de servicio (reinicio del dispositivo o cuelgue) y posiblemente ejecutar código de su elección mediante una trama reservada de gestión truncada.

*Credits: N/A

CVSS Scores

NISTv2 5.5

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-01-07 CVE Reserved
2009-11-12 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://www.osvdb.org/59880	Vdb Entry
http://www.securityfocus.com/archive/1/507777/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/36991	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/54216	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/37344	2018-10-11
http://www.vupen.com/english/advisories/2009/3212	2018-10-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Netgear Search vendor "Netgear"	Wndap330 Firmware Search vendor "Netgear" for product "Wndap330 Firmware"	2.1.11 Search vendor "Netgear" for product "Wndap330 Firmware" and version "2.1.11"	-	Affected	in	Atheros Search vendor "Atheros"	Ar9160-bc1a Chipset Search vendor "Atheros" for product "Ar9160-bc1a Chipset"	*	-	Affected
Netgear Search vendor "Netgear"	Wndap330 Firmware Search vendor "Netgear" for product "Wndap330 Firmware"	2.1.11 Search vendor "Netgear" for product "Wndap330 Firmware" and version "2.1.11"	-	Affected	in	Netgear Search vendor "Netgear"	Wndap330 Search vendor "Netgear" for product "Wndap330"	*	-	Safe