CVE-2024-51004

Katalog CVE

CVSS 5.7 · Medium EPSS 0,31%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada netgear r8500 firmware, netgear r7000p firmware. Skor CVSS 3.1 5.7 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.

Rincian

Terbit di NVD

5 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.7 (Medium), sumber CISA ADP
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.netgear.com/about/security/ advisory vendor
• https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_51/51.md broken link