8.8

CVE-2019-20697

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Gs728tpp Firmware Version < 6.0.0.48
   Netgear ≫ Gs728tpp Version v2
Netgear ≫ Gs728tp Firmware Version < 6.0.0.48
   Netgear ≫ Gs728tp Version v2
Netgear ≫ Gs750e Firmware Version < 1.0.1.4
   Netgear ≫ Gs750e Version -
Netgear ≫ Gs752tpp Firmware Version < 6.0.0.48
   Netgear ≫ Gs752tpp Version -
Netgear ≫ Gs752tp Firmware Version < 6.0.0.48
   Netgear ≫ Gs752tp Version v2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.415
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
MITRE 8.8 2.8 5.3
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://kb.netgear.com/000061232/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Switches-PSV-2019-0066
Vendor Advisory