CVE-2019-20762

MEDIUM

Netgear D8500 Firmware < 1.0.3.43 - Buffer Overflow

Title source: rule

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D8500 before 1.0.3.43, R8500 before 1.0.2.128, R8300 before 1.0.2.128, R8000 before 1.0.4.28, R7300DST before 1.0.0.68, R7100LG before 1.0.0.48, R6900P before 1.3.1.44, R7900P before 1.4.1.30, R8000P before 1.4.1.30, R7000P before 1.3.1.44, R7000 before 1.0.9.34, R6900 before 1.0.2.4, R6700 before 1.0.2.6, and R6400 before 1.0.1.44.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://kb.netgear.com/000060637/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Modem-Routers-and-Gateways-PSV-2018-0197

Scores

CVSS v3 6.8

EPSS 0.0030

EPSS Percentile 53.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-120

Status published

Products (14)

netgear/d8500_firmware < 1.0.3.43

netgear/r6400_firmware < 1.0.1.44

netgear/r6700_firmware < 1.0.2.6

netgear/r6900_firmware < 1.0.2.4

netgear/r6900p_firmware < 1.3.1.44

netgear/r7000_firmware < 1.0.9.34

netgear/r7000p_firmware < 1.3.1.44

netgear/r7100lg_firmware < 1.0.0.48

netgear/r7300dst_firmware < 1.0.0.68

netgear/r7900p_firmware < 1.4.1.30

... and 4 more

Published Apr 16, 2020

Tracked Since Feb 18, 2026