Описание
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
Ссылки
- ExploitPatchThird Party Advisory
- Vendor Advisory
- Vendor Advisory
- ExploitPatchThird Party Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:netgear:ex6100_firmware:201.0.2.28:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6100:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ex6200:-:*:*:*:*:*:*:*
Конфигурация 3
Одновременно
cpe:2.3:o:netgear:cax80_firmware:2.1.2.6:*:*:*:*:*:*:*
cpe:2.3:h:netgear:cax80:-:*:*:*:*:*:*:*
Конфигурация 4
Одновременно
cpe:2.3:o:netgear:dc112a_firmware:1.0.0.62:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00139
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 7.8
github
почти 4 года назад
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
EPSS
Процентиль: 34%
0.00139
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-787