Stack overflow

2022-03-1811:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

54.7%

JSON

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.

CPENameOperatorVersion
cax80_firmwareeq2.1.2.6
dc112a_firmwareeq1.0.0.62
ex6100_firmwareeq201.0.2.28

Name	Operator	Version
cax80_firmware	eq	2.1.2.6
dc112a_firmware	eq	1.0.0.62
ex6100_firmware	eq	201.0.2.28

References

github.com/doudoudedi/Netgear_product_stack_overflow/blob/main/NETGEAR%20EX%20series%20upnpd%20stack_overflow.md

kb.netgear.com/000064615/Security-Advisory-for-Pre-Authentication-Command-Injection-on-EX6100v1-and-Pre-Authentication-Stack-Overflow-on-Multiple-Products-PSV-2021-0282-PSV-2021-0288

www.netgear.com/about/security/

0.002 Low

EPSS

Percentile

54.7%

JSON

Related for PRION:CVE-2022-24655