VulnerabilityModified

CVE-2019-20754

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 6.8EPSS 0.51%

Does this matter?

Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.

Description

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.58, DGN2200B before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.80, D6220 before 1.0.0.44, EX7000 before 1.0.0.66, EX6200 before 1.0.3.88, EX6150 before 1.0.0.42, EX7500 before 1.0.0.46, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before 1.0.2.122, R8300 before 1.0.2.122, R7900P before 1.4.0.10, R8000P before 1.4.0.10, R7900 before 1.0.2.16, R7000P before 1.3.1.44, R7300DST before 1.0.0.68, R7100LG before 1.0.0.46, R6900P before 1.3.1.44, R7000 before 1.0.9.32, R6900 before 1.0.1.46, R6700 before 1.0.1.46, R6400v2 before 1.0.2.56, R6400 before 1.0.1.42, R6300v2 before 1.0.4.28, R6250 before 1.0.4.26, WNDR4500v2 before 1.0.0.72, and WNR3500Lv2 before 1.2.0.54.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.51% probability · 42th percentile
CISA KEV: Not listed
Weakness: CWE-120
Affected: netgear/dgn2200 firmware · netgear/dgn2200b firmware · netgear/d8500 firmware · netgear/d7000 firmware · netgear/d6400 firmware · netgear/d6220 firmware · netgear/ex7000 firmware · netgear/ex6200 firmware · netgear/ex6150 firmware · netgear/ex7500 firmware · netgear/jndr3000 firmware · netgear/r8000 firmware · netgear/r8500 firmware · netgear/r8300 firmware · netgear/r7900p firmware · netgear/r8000p firmware · netgear/r7900 firmware · netgear/r7000p firmware · netgear/r7300dst firmware · netgear/r7100lg firmware · +9 more
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.