CVE-2023-38922: Buffer Overflow
Published Aug 7, 2023
·Updated
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the httppasswd and httpusername parameters in the updateauth function.
Affected Software
6 affected components
Netgear Jwnr2000v2 Firmware=1.0.0.11
Netgear JWNR2000v2
Netgear Xwn5001 Firmware=0.4.1.1
Netgear XWN5001
Netgear Xavn2001v2 Firmware=0.4.0.7
Netgear XAVN2001v2
Event History
Aug 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Netgear issue?
The vulnerability ID for this Netgear issue is CVE-2023-38922.
2
What is the severity rating of CVE-2023-38922?
The severity rating of CVE-2023-38922 is high.
3
Which Netgear products are affected by CVE-2023-38922?
Netgear JWNR2000v2 v1.0.0.11, Netgear XWN5001 v0.4.1.1, and Netgear XAVN2001v2 v0.4.0.7 are affected by CVE-2023-38922.
4
What is the vulnerability type of CVE-2023-38922?
CVE-2023-38922 is a buffer overflow vulnerability.
5
Are there any fixes available for CVE-2023-38922?
Yes, Netgear has released firmware updates to address the buffer overflow vulnerabilities in affected products.