CVE-2006-6125

NetGear WG311v1 - Heap-Based Buffer Overflow via 802.11 Management Frame with Long SSID

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-6125. PoCs published by Laurent Butti.

AI-analyzed exploit summary This exploit targets a heap-based buffer overflow in the NetGear WG311v1 wireless driver (WG311ND5.SYS) by sending malformed probe response frames with an overly long SSID field. It is designed to cause a denial-of-service (DoS) by crashing the kernel, with potential for remote code execution (RCE) in development.

Description

Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to execute arbitrary code via an 802.11 management frame with a long SSID.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Laurent Butti · rubyremotewindows
https://www.exploit-db.com/exploits/29167

This exploit targets a heap-based buffer overflow in the NetGear WG311v1 wireless driver (WG311ND5.SYS) by sending malformed probe response frames with an overly long SSID field. It is designed to cause a denial-of-service (DoS) by crashing the kernel, with potential for remote code execution (RCE) in development.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: NetGear WG311v1 Wireless Driver (WG311ND5.SYS) version 2.3.1.10
No auth needed
Prerequisites: Lorcon library · Linux platform with supported wireless card · Target MAC address
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23051
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/403152
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21251
Exploit, Vendor Advisory x_refsource_misc
http://projects.info-pull.com/mokb/MOKB-22-11-2006.html
Vendor Advisory vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017275
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4674

Scores

EPSS 0.1440
EPSS Percentile 96.2%

Details

CWE
CWE-119
Status published
Products (1)
netgear/wg311v1 2.3.1.10
Published Nov 27, 2006
Tracked Since Feb 18, 2026