NETGEAR R7000P openvpn_push1 buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. A buffer overflow vulnerability exists in NETGEAR R7000P firmware version V1.3.1.64, which stems from a lack of length validation of data input to the openvpnpush1 parameter, which could be exploited by an attacker to cause a denial of servic...

NETGEAR R7000P openvpn_server_ip buffer overflow vulnerability

NETGEAR R7000P is a wireless router from NETGEAR, Inc. NETGEAR R7000P firmware version V1.3.1.64 is vulnerable to a buffer overflow vulnerability caused by a lack of length validation of the data entered in the openvpnserverip parameter, which could be exploited by an attacker to cause a denial o...

Buffer overflow

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpnserverip...

Buffer overflow

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpnpush1...

CVE-2022-44199

Netgear R7000P firmware version 1.3.1.64 is affected by CVE-2022-44199 due to a buffer overflow in the openvpn_server_ip parameter. Root cause: insufficient length validation for the openvpn_server_ip input, enabling an overflow condition. Impact as stated: potential denial of service or remote c...

CVE-2022-44191

Summary (CVE-2022-44191) : Netgear R7000P router, version 1.3.1.64, is reported vulnerable to a buffer overflow triggered by inputs to the KEY1 and KEY2 parameters. The vulnerability is described as arising from lack of length validation on these inputs, with potential for remote code execution o...

CVE-2022-44190

CVE-2022-44190 affects Netgear R7000P (firmware version 1.3.1.64). The root cause is a buffer overflow from the enable_band_steering parameter due to insufficient input validation, enabling an attacker to trigger a denial of service or remote code execution over the network with no user interacti...

CVE-2022-44198

CVE-2022-44198 affects Netgear R7000P firmware v1.3.1.64; the openvpn_push1 parameter is vulnerable to a buffer overflow, enabling potential exposure to denial of service or remote code execution. Public sources colocate this under a high-severity, network-based issue (score up to 9.8). Valid det...