First published: Thu Apr 16 2020(Updated: )
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2200v4 before 1.0.0.110 and DGND2200Bv4 before 1.0.0.109.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear Dgn2200 Firmware | <1.0.0.110 | |
Netgear DGN2200 | =v4 | |
Netgear Dgnd2200b Firmware | <1.0.0.109 | |
Netgear Dgnd2200b | =v4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
DGN2200v4 before 1.0.0.110 and DGND2200Bv4 before 1.0.0.109 are affected.
The severity of CVE-2019-20716 is medium with a severity value of 6.8.
An attacker can exploit CVE-2019-20716 by performing a stack-based buffer overflow attack.
The CWE ID for CVE-2019-20716 is CWE-119 and CWE-787.
You can find more information about CVE-2019-20716 in the Netgear Security Advisory at the following link: https://kb.netgear.com/000061212/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-DGN2200v4-and-DGND2200Bv4-PSV-2018-0241.