CVE-2020-28373

🗓️ 09 Nov 2020 22:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. Affects multiple device models

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2020-28373	10 Nov 202000:55	–	circl
CVE	CVE-2020-28373	9 Nov 202021:32	–	cve
Cvelist	CVE-2020-28373	9 Nov 202021:32	–	cvelist
EUVD	EUVD-2020-20832	7 Oct 202500:30	–	euvd
Prion	Stack overflow	9 Nov 202022:15	–	prion

NVD

Node

netgear r6400v2_firmwareMatch1.0.4.102_10.0.75

AND

netgear r6400v2Match-

Node

netgear r6400_firmwareMatch1.0.1.62_1.0.41

AND

netgear r6400Match-

Node

netgear r7000p_firmwareMatch1.3.2.126_10.1.66

AND

netgear r7000pMatch-

Node

netgear xr300_firmwareMatch1.0.3.50_10.3.36

AND

netgear xr300Match-

Node

netgear r8000_firmwareMatch1.0.4.62

AND

netgear r8000Match-

Node

netgear r8300_firmwareMatch1.0.2.136

AND

netgear r8300Match-

Node

netgear r8500_firmwareMatch1.0.2.136

AND

netgear r8500Match-

Node

netgear r7300dst_firmwareMatch1.0.0.74

AND

netgear r7300dstMatch-

Node

netgear r7850_firmwareMatch1.0.5.64

AND

netgear r7850Match-

Node

netgear r7900_firmwareMatch1.0.4.30

AND

netgear r7900Match-

Node

netgear rax20_firmwareMatch1.0.2.64

AND

netgear rax20Match-

Node

netgear rax80_firmwareMatch1.0.3.102

AND

netgear rax80Match-

Node

netgear r6250_firmwareMatch1.0.4.44

AND

netgear r6250Match-

Source	Link
github	www.github.com/cpeggg/Netgear-upnpd-poc

21 Nov 2024 05:22Current

9High risk

Vulners AI Score9

CVSS 28.3

CVSS 3.18.8

EPSS0.0011

upnpd netgear remote attackers arbitrary code buffer overflow r6400v2 r6400 r7000p xr300 r8000 r8300 r8500 r7300dst r7850 r7900 rax20 rax80 r6250