CVE-2020-28373 Memory corruption in n/a
Remote attackers on the local network can execute arbitrary code on NETGEAR routers via a stack-based buffer overflow in the upnpd service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-28373?
CVE-2020-28373 is a high-severity memory corruption vulnerability in Netgear R6250 Firmware, published on 9 Nov 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.3.2.126_10.1.66, XR300 V1.0.3.50_10.3.36, R8000 V1.0.4.62, R8300 V1.0.2.136, R8500 V1.0.2.136, R7300DST V1.0.0.74, R7850 V1.0.5.64, R7900 V1.0.4.30, RAX20 V1.0.2.64, RAX80 V1.0.3.102, and R6250 V1.0.4.44.
Weakness: CWE-787
Which versions are affected by CVE-2020-28373?
It affects 13 products.
Products include Netgear R6250 Firmware, Netgear R6400 Firmware, Netgear R6400v2 Firmware, Netgear R7000p Firmware, Netgear R7300dst Firmware, Netgear R7850 Firmware and 7 more.
How do I fix CVE-2020-28373?
No fix has been published for CVE-2020-28373 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-28373 being exploited?
There is no known exploitation of CVE-2020-28373 in the wild and no public exploit code.
Other vulnerabilities in Netgear R6250 Firmware
Sources
Also known as GHSA-q256-52r3-3786.