A vulnerability was found in Netgear D7000v2, D7800, D8500, DGN2200v4, DGND2200Bv4, DM200, JNDR3000, RBK50, RBR50, RBS50, RBW30, R6250, R6300v2, R6400, R6400v2, R6700, R6900, R7000, R6900P, R7000P, R7100LG, R7300DST, R7500v2, R7800, R7900, R8000, R7900P, R8000P, R8300, R8500, R8900, R9000, WNDR3400v3, WNDR3700v4 and WNDR4300v1 (Router Operating System). It has been declared as critical. This vulnerability affects an unknown functionality. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGND2200Bv4 before 1.0.0.102, DM200 before 1.0.0.52, JNDR3000 before 1.0.0.22, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, RBW30 before 2.1.2.6, R6250 before 1.0.4.26, R6300v2 before 1.0.4.24, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.26, R6900P before 1.3.0.20, R7000P before 1.3.0.20, R7100LG before 1.0.0.40, R7300DST before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 before 1.0.2.44, R7900 before 1.0.2.10, R8000 before 1.0.4.12, R7900P before 1.3.0.10, R8000P before 1.3.0.10, R8300 before 1.0.2.116, R8500 before 1.0.2.116, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3400v3 before 1.0.1.18, WNDR3700v4 before 1.0.2.96, WNDR4300v1 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, WNR2000v5 before 1.0.0.64, and WNR3500Lv2 before 1.2.0.48.

The weakness was disclosed 04/16/2020 (Website). The advisory is shared for download at kb.netgear.com. This vulnerability was named CVE-2019-20728 since 04/15/2020. The attack needs to be approached locally. The successful exploitation needs a single authentication. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Netgear

Name

• D7000v2
• D7800
• D8500
• DGN2200v4
• DGND2200Bv4
• DM200
• JNDR3000
• R6250
• R6300v2
• R6400
• R6400v2
• R6700
• R6900
• R6900P
• R7000
• R7000P
• R7100LG
• R7300DST
• R7500v2
• R7800
• R7900
• R7900P
• R8000
• R8000P
• R8300
• R8500
• R8900
• R9000
• RBK50
• RBR50
• RBS50
• RBW30
• WNDR3400v3
• WNDR3700v4
• WNDR4300v1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion