Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-39550

Published: 07/08/2023 Updated: 09/08/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Netgear

Vulnerability Summary

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.

Vulnerable Product Search on Vulmon Subscribe to Product

netgear jwnr2000v2_firmware 1.0.0.11

netgear xwn5001_firmware 0.4.1.1

netgear xavn2001v2_firmware 0.4.0.7

References

CWE-120https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.mdhttps://www.netgear.com/about/security/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook