CVE-2019-20716 Memory corruption in n/a

What is CVE-2019-20716?

CVE-2019-20716 is a medium-severity memory corruption vulnerability in n/a, published on 16 Apr 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2200v4 before 1.0.0.110 and DGND2200Bv4 before 1.0.0.109.

Weakness: CWE-787

Which versions are affected by CVE-2019-20716?

It affects 2 products.

Products include Netgear Dgn2200 Firmware, Netgear Dgnd2200b Firmware.

How do I fix CVE-2019-20716?

No fix has been published for CVE-2019-20716 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-20716 being exploited?

There is no known exploitation of CVE-2019-20716 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-6077 NETGEAR DGN2200 Remote Code Execution Exploited Critical 9.8
• CVE-2019-17373 Auth bypass in n/a Critical 9.8
• CVE-2016-5649 Netgear DGN2200 and DGND3700 disclose the administrator password Critical 9.8
• CVE-2024-57046 Auth bypass in n/a High 8.8
• CVE-2017-18755 Cross-site request forgery in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p7mh-mqrg-wx2f.