CVE-2020-15634: NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers with firmware 1.0.4.8410.0.58. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-9755.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of string table file uploads. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to execute code in the context of the web server.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-15634?
CVE-2020-15634 is a vulnerability in NETGEAR R6700 routers that allows network-adjacent attackers to execute arbitrary code.
How can attackers exploit CVE-2020-15634?
Attackers can exploit CVE-2020-15634 by uploading a malicious string table file.
Is authentication required to exploit CVE-2020-15634?
No, authentication is not required to exploit CVE-2020-15634.
What is the severity of CVE-2020-15634?
CVE-2020-15634 has a severity rating of 6.3 (Medium).
How can I fix CVE-2020-15634?
To fix CVE-2020-15634, you should update the firmware of your NETGEAR R6700 router to version 1.0.4.98 or later.