NetSight
IP …
medium6.8

CVE-2019-20735

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

Impact

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 before 1.0.0.75, D6000 before V1.0.0.75, D6100 before V1.0.0.63, R7800 before v1.0.2.52, R8900 before v1.0.4.2, R9000 before v1.0.4.2, RBK50 before v2.3.0.32, RBR50 before v2.3.0.32, RBS50 before v2.3.0.32, WNDR3700v4 before V1.0.2.102, WNDR4300v1 before V1.0.2.104, WNDR4300v2 before v1.0.0.58, WNDR4500v3 before v1.0.0.58, WNR2000v5 before v1.0.0.68, and XR500 before V2.3.2.32.

Affected products

VendorProductAffected versions
NetgearD3600 Firmware
before 1.0.0.75
NetgearD6000 Firmware
before 1.0.0.75
NetgearD6100 Firmware
before 1.0.0.63
NetgearR7800 Firmware
before 1.0.2.52
NetgearR8900 Firmware
before 1.0.4.2
NetgearR9000 Firmware
before 1.0.4.2
NetgearRbk50 Firmware
before 2.3.0.32
NetgearRbr50 Firmware
before 2.3.0.32
NetgearRbs50 Firmware
before 2.3.0.32
NetgearWndr3700 Firmware
before 1.0.2.102
NetgearWndr4300 Firmware
before 1.0.2.104
before 1.0.0.58
NetgearWndr4500 Firmware
before 1.0.0.58

Weakness classification

CWE-787

References