CVE-2023-38922: Buffer Overflow
First published: Mon Aug 07 2023(Updated: )
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Jwnr2000v2 Firmware | =1.0.0.11 | |
| Netgear JWNR2000v2 | ||
| Netgear Xwn5001 Firmware | =0.4.1.1 | |
| Netgear XWN5001 | ||
| Netgear Xavn2001v2 Firmware | =0.4.0.7 | |
| Netgear Xavn2001v2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Netgear issue?
The vulnerability ID for this Netgear issue is CVE-2023-38922.
What is the severity rating of CVE-2023-38922?
The severity rating of CVE-2023-38922 is high.
Which Netgear products are affected by CVE-2023-38922?
Netgear JWNR2000v2 v1.0.0.11, Netgear XWN5001 v0.4.1.1, and Netgear XAVN2001v2 v0.4.0.7 are affected by CVE-2023-38922.
What is the vulnerability type of CVE-2023-38922?
CVE-2023-38922 is a buffer overflow vulnerability.
Are there any fixes available for CVE-2023-38922?
Yes, Netgear has released firmware updates to address the buffer overflow vulnerabilities in affected products.
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear jwnr2000v2 firmware
- version/netgear jwnr2000v2 firmware/1.0.0.11
- canonical/netgear jwnr2000v2
- canonical/netgear xwn5001 firmware
- version/netgear xwn5001 firmware/0.4.1.1
- canonical/netgear xwn5001
- canonical/netgear xavn2001v2 firmware
- version/netgear xavn2001v2 firmware/0.4.0.7
- canonical/netgear xavn2001v2