Vulnerability Description
The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim visits an attacker-controlled web site with a modern browser, aka NAT Slipstreaming. This occurs because the ALG takes action based on an IP packet with an initial REGISTER substring in the TCP data, and the correct intranet IP address in the subsequent Via header, without properly considering that connection progress and fragmentation affect the meaning of the packet data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Nighthawk R7000 Firmware | 1.0.9.64_10.2.64 |
| Netgear | Nighthawk R7000 | - |
Related Weaknesses (CWE)
References
- https://github.com/samyk/slipstreamThird Party Advisory
- https://news.ycombinator.com/item?id=24956616ExploitThird Party Advisory
- https://news.ycombinator.com/item?id=24958281ExploitThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0024Third Party Advisory
- https://samy.pl/slipstream/ExploitThird Party Advisory
- https://github.com/samyk/slipstreamThird Party Advisory
- https://news.ycombinator.com/item?id=24956616ExploitThird Party Advisory
- https://news.ycombinator.com/item?id=24958281ExploitThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0024Third Party Advisory
- https://samy.pl/slipstream/ExploitThird Party Advisory
FAQ
What is CVE-2020-28041?
CVE-2020-28041 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and UDP services on a victim's intranet machine, if the victim ...
How severe is CVE-2020-28041?
CVE-2020-28041 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-28041?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Nighthawk R7000 Firmware, Netgear Nighthawk R7000.