CVE-2023-36187
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.
Una vulnerabilidad de desbordamiento de búfer en NETGEAR R6400v2 antes de la versión 1.0.4.118, permite a atacantes remotos no autenticados ejecutar código arbitrario a través de una URL manipulada para httpd.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-06-21 CVE Reserved
- 2023-09-01 CVE Published
- 2024-08-02 CVE Updated
- 2024-09-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Cbr40 Firmware Search vendor "Netgear" for product "Cbr40 Firmware" | < 2.5.0.24 Search vendor "Netgear" for product "Cbr40 Firmware" and version " < 2.5.0.24" | - |
Affected
| in | Netgear Search vendor "Netgear" | Cbr40 Search vendor "Netgear" for product "Cbr40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Lax20 Firmware Search vendor "Netgear" for product "Lax20 Firmware" | < 1.1.6.34 Search vendor "Netgear" for product "Lax20 Firmware" and version " < 1.1.6.34" | - |
Affected
| in | Netgear Search vendor "Netgear" | Lax20 Search vendor "Netgear" for product "Lax20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Mk62 Firmware Search vendor "Netgear" for product "Mk62 Firmware" | < 1.1.6.122 Search vendor "Netgear" for product "Mk62 Firmware" and version " < 1.1.6.122" | - |
Affected
| in | Netgear Search vendor "Netgear" | Mk62 Search vendor "Netgear" for product "Mk62" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Mr60 Firmware Search vendor "Netgear" for product "Mr60 Firmware" | < 1.1.6.122 Search vendor "Netgear" for product "Mr60 Firmware" and version " < 1.1.6.122" | - |
Affected
| in | Netgear Search vendor "Netgear" | Mr60 Search vendor "Netgear" for product "Mr60" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ms60 Firmware Search vendor "Netgear" for product "Ms60 Firmware" | < 1.1.6.122 Search vendor "Netgear" for product "Ms60 Firmware" and version " < 1.1.6.122" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ms60 Search vendor "Netgear" for product "Ms60" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbw30 Firmware Search vendor "Netgear" for product "Rbw30 Firmware" | < 2.6.2.6 Search vendor "Netgear" for product "Rbw30 Firmware" and version " < 2.6.2.6" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbw30 Search vendor "Netgear" for product "Rbw30" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6400 Firmware Search vendor "Netgear" for product "R6400 Firmware" | < 1.0.1.70 Search vendor "Netgear" for product "R6400 Firmware" and version " < 1.0.1.70" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6400 Search vendor "Netgear" for product "R6400" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6400v2 Firmware Search vendor "Netgear" for product "R6400v2 Firmware" | < 1.0.4.118 Search vendor "Netgear" for product "R6400v2 Firmware" and version " < 1.0.4.118" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6400v2 Search vendor "Netgear" for product "R6400v2" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700v3 Firmware Search vendor "Netgear" for product "R6700v3 Firmware" | < 1.0.4.118 Search vendor "Netgear" for product "R6700v3 Firmware" and version " < 1.0.4.118" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700v3 Search vendor "Netgear" for product "R6700v3" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000 Firmware Search vendor "Netgear" for product "R7000 Firmware" | < 1.0.11.130 Search vendor "Netgear" for product "R7000 Firmware" and version " < 1.0.11.130" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000 Search vendor "Netgear" for product "R7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000p Firmware Search vendor "Netgear" for product "R7000p Firmware" | < 1.3.3.148 Search vendor "Netgear" for product "R7000p Firmware" and version " < 1.3.3.148" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000p Search vendor "Netgear" for product "R7000p" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rax200 Firmware Search vendor "Netgear" for product "Rax200 Firmware" | < 1.0.4.120 Search vendor "Netgear" for product "Rax200 Firmware" and version " < 1.0.4.120" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rax200 Search vendor "Netgear" for product "Rax200" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rax75 Firmware Search vendor "Netgear" for product "Rax75 Firmware" | < 1.0.4.120 Search vendor "Netgear" for product "Rax75 Firmware" and version " < 1.0.4.120" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rax75 Search vendor "Netgear" for product "Rax75" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rax80 Firmware Search vendor "Netgear" for product "Rax80 Firmware" | < 1.0.4.120 Search vendor "Netgear" for product "Rax80 Firmware" and version " < 1.0.4.120" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rax80 Search vendor "Netgear" for product "Rax80" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rs400 Firmware Search vendor "Netgear" for product "Rs400 Firmware" | < 1.5.1.86 Search vendor "Netgear" for product "Rs400 Firmware" and version " < 1.5.1.86" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rs400 Search vendor "Netgear" for product "Rs400" | - | - |
Safe
|