NETGEAR Multiple Devices Buffer Overflow Vulnerability

Technical Severity

CRITICAL

9.8 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation Likelihood

43.31 %

Predictive Probability

Percentile Rank

97.4 th

Documented as more likely to be exploited than 97.4% of known CVEs.

Detection Date

Jun 08, 2022

Remediation Due

Jun 22, 2022

CISA Catalog Active

Threat Analysis

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.

Apply updates per vendor instructions.

Vendor Identity

NETGEAR

Affected Product

Multiple Devices

Ransomware Status

Campaign Use Unknown

Weakness Classification

CWE-119

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2017-6862