CVE-2022-48176

CVSS V2 None CVSS V3 None
Description
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
Overview
  • CVE ID
  • CVE-2022-48176
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-31T00:15:10
  • Last Modified Date
  • 2023-02-08T02:02:09
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.3.154
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* 1 OR 1.3.3.154
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.4.94
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* 1 OR 1.4.4.94
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.7.132
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.7.132
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://hdwsec.fr/blog/20221109-netgear/ Broken Link
https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146 Patch Vendor Advisory
https://www.netgear.com/about/security/ Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-48176
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48176
History
Created Old Value New Value Data Type Notes
2023-04-17 06:59:05 Added to TrackCVE
2023-04-17 06:59:07 Weakness Enumeration new