Vulnerability Name:

CCN-230097

Published:2022-06-29
Updated:2022-06-29
Summary:NETGEAR products are vulnerable to a denial of service, caused by an unspecified issue. By sending a specially-crafted file, a remote attacker could exploit this vulnerability to cause a denial of service
CVSS v3 Severity:4.8 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): High
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.3 Medium (CCN CVSS v2 Vector: AV:A/AC:H/Au:S/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): High
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Consequences:Denial of Service
References:Source: XF
Type: UNKNOWN
netgear-psv20210141-dos(230097)

Source: CCN
Type: PSV-2021-0141
Security Advisory for Denial of Service on Some Routers and WiFi Systems

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/h:netgear:r6400:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r7000:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:dc112a:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r7000p:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r8000:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r6400:v2:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:xr300:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:mk62:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:ms60:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r6700:v3:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r7000:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r7850:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:mr60:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:r6900p:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:wndr3400:v3:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:xr1000:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:mr80:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:ms80:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:rs400:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:mk83:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:raxe500:-:*:*:*:*:*:*:*
  • OR cpe:/h:netgear:raxe450:-:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    netgear r6400 -
    netgear r7000 -
    netgear dc112a -
    netgear r7000p -
    netgear r8000 -
    netgear r6400 v2
    netgear xr300 -
    netgear mk62 -
    netgear ms60 -
    netgear r6700 v3
    netgear r7000 -
    netgear r7850 -
    netgear mr60 -
    netgear r6900p -
    netgear wndr3400 v3
    netgear xr1000 -
    netgear mr80 -
    netgear ms80 -
    netgear rs400 -
    netgear mk83 -
    netgear raxe500 -
    netgear raxe450 -