NetSight
high8.8

CVE-2019-20753

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.

Impact

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2200v1 before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.78, D6220 before 1.0.0.44, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before 1.0.2.122, R8300 before 1.0.2.122, R7900 before 1.0.2.16, R7000P before 1.3.2.34, R7300DST before 1.0.0.68, R7100LG before 1.0.0.46, R6900P before 1.3.2.34, R7000 before 1.0.9.28, R6900 before 1.0.1.46, R6700 before 1.0.1.46, R6400v2 before 1.0.2.56, R6400 before 1.0.1.42, R6300v2 before 1.0.4.28, R6250 before 1.0.4.26, WNDR3400v3 before 1.0.1.22, WNDR4500v2 before 1.0.0.72, and WNR3500Lv2 before 1.2.0.50.

Affected products

VendorProductAffected versions
NetgearDgn2200 Firmware
before 1.0.0.58
NetgearD8500 Firmware
before 1.0.3.42
NetgearD7000 Firmware
before 1.0.0.51
NetgearD6400 Firmware
before 1.0.0.78
NetgearD6220 Firmware
before 1.0.0.44
NetgearJndr3000 Firmware
before 1.0.0.24
NetgearR8000 Firmware
before 1.0.4.18
NetgearR8500 Firmware
before 1.0.2.122
NetgearR8300 Firmware
before 1.0.2.122
NetgearR7900 Firmware
before 1.0.2.16
NetgearR7000p Firmware
before 1.3.2.34
NetgearR7300dst Firmware
before 1.0.0.68

Weakness classification

References