(Pwn2Own) Netgear R6700v3 NetUSB Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of proper validatio...

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software is related to writing data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-24354

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...

CVE-2022-24354

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...

Tp-link AC1750 输入验证错误漏洞

The Tp-link AC1750 is a wireless router from China P&L Tp-link. The TP-Link AC1750 suffers from an input validation error vulnerability that stems from a specific flaw in the NetUSB.ko module. The issue is caused due to a lack of proper validation of user-supplied data, which could result in an...

(Pwn2Own) TP-Link AC1750 NetUSB Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko kernel module. The issue results from the lack of proper...

The vulnerability of the `oftwareBus_dispatchNormalEPMsgOut()` function in the kernel module of KCodes NetUSB, which is part of the Wi-Fi router software for NETGEAR devices like R6220, R6230, R6400v2, R6700v3, R7000, R7800, and the repeater software NETGEAR EX8000, EX6200v2, as well as the DSL modem software D7800, allows a malicious actor to execute arbitrary code.

The vulnerability of the softwareBusdispatchNormalEPMsgOut function in the kernel module of KCodes NetUSB, a built-in software for Wi-Fi routers of NETGEAR models R6220, R7000, and R7800, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability cou...

Millions of Routers Exposed to RCE by USB Kernel Bug

Millions of popular end-user routers are at risk of remote code execution RCE due to a high-severity flaw in the KCodes NetUSB kernel module. The module enables remote devices to connect to routers over IP and access any USB devices such as printers, speakers, webcams, flash drives and other...

New KCodes NetUSB Bug Affect Millions of Routers from Different Vendors

Cybersecurity researchers have detailed a high severity flaw in KCodes NetUSB component that's integrated into millions of end-user router devices from Netgear, TP-Link, Tenda, EDiMAX, D-Link, and Western Digital, among others. KCodes NetUSB is a Linux kernel module that enables devices on a loca...

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

Integer overflow

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

CVE-2021-45608

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Remote code execution from the WAN interface TCP port 20005 cannot be ruled out; however, exploitability was judged to be of "rather significant...

CVE-2021-45608

CVE-2021-45608 is a buffer/integer overflow in KCodes NetUSB kernel module (SoftwareBus_dispatchNormalEPMsgOut) affecting D-Link, Edimax, NETGEAR, TP-Link, Tenda and Western Digital devices. Affected NETGEAR models include D7800 (before 1.0.1.68), R6400v2 (before 1.0.4.122), and R6700v3 (before 1...

PT-2021-6443 · NetGear · Netgear R6400V2 +5

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR D7800 affected versions not specified NETGEAR R6220 affected versions not specified NETGEAR R6230 affected versions not specified NETGEAR R6400v2 affected versions not specified NETGEAR R7000...

PT-2021-6113 · Tp Link · Tp-Link Ac1750

Name of the Vulnerable Software and Affected Versions: TP-Link AC1750 versions prior to 211210 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

PT-2021-6114 · Tp Link · Tp-Link Ac1750

Name of the Vulnerable Software and Affected Versions: TP-Link AC1750 version 1.1.4 Build 20211022 rel.591035553 Description: The issue is related to a read past the end of an allocated buffer in the NetUSB.ko module, which can be exploited by network-adjacent attackers to execute arbitrary code ...

Threat Source newsletter (June 20, 2019)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. This week, we disclosed two vulnerabilities in KCodes’ NetUSB kernel module contains that could allow an attacker to inappropriatel...

Nighthawk AC3200 (R8000) NetUSB.ko Information Disclosure Vulnerability

The NETGEAR Nighthawk AC3200 is a tri-band wireless router from NETGEAR. An information disclosure vulnerability exists in NetUSB.ko version 1.0.2.66 in the Nighthawk AC3200 R8000 using firmware version 1.0.4.2810.1.54 11/7/18. The vulnerability stems from an error in configuration or other error...

CVE-2019-5017

An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated, remote attacker can craft and send a...