1. Home
  2. CVE Database
  3. CVE-2023-36187
CRITICAL · 9.8

CVE-2023-36187

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

Vulnerability Description

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetgearCbr40 Firmware< 2.5.0.24
NetgearCbr40-
NetgearLax20 Firmware< 1.1.6.34
NetgearLax20-
NetgearMk62 Firmware< 1.1.6.122
NetgearMk62-
NetgearMr60 Firmware< 1.1.6.122
NetgearMr60-
NetgearMs60 Firmware< 1.1.6.122
NetgearMs60-
NetgearRbw30 Firmware< 2.6.2.6
NetgearRbw30-
NetgearR6400 Firmware< 1.0.1.70
NetgearR6400-
NetgearR6400V2 Firmware< 1.0.4.118
NetgearR6400V2-
NetgearR6700V3 Firmware< 1.0.4.118
NetgearR6700V3-
NetgearR7000 Firmware< 1.0.11.130
NetgearR7000-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2023-36187?

CVE-2023-36187 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

How severe is CVE-2023-36187?

CVE-2023-36187 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-36187?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Cbr40 Firmware, Netgear Cbr40, Netgear Lax20 Firmware, Netgear Lax20, Netgear Mk62 Firmware.