CVE-2017-18779

Vulnerability

A buffer overflow vulnerability exists in the firmware of multiple NETGEAR routers, including D6200, D7000, JNR1010v2, JR6150, JWNR2010v5, PR2000, R6020, R6050, R6080, R6120, R6220, R6700v2, R6800, R6900v2, WNDR3700v5, WNR1000v4, WNR2020, and WNR2050. The affected firmware versions are those prior to the fixed versions listed in the advisory. The vulnerability may be triggered by specially crafted network traffic or other inputs, leading to memory corruption. No authentication is required for exploitation [1].

Exploitation

An attacker can exploit this vulnerability remotely without authentication. By sending specially crafted packets or requests to an affected device, the attacker can trigger a buffer overflow condition. No user interaction is required [1].

Impact

Successful exploitation can cause a denial of service or potentially allow arbitrary code execution. The attacker could gain full control of the affected device, leading to compromise of network traffic and connected devices [1].

Mitigation

NETGEAR has released fixed firmware versions for all affected models. Users should immediately download and install the latest firmware from the NETGEAR Support website for their specific device. The fixed versions are: D6200 (1.1.00.24), D7000 (1.0.1.52), JNR1010v2 (1.1.0.44), JR6150 (1.0.1.12), JWNR2010v5 (1.1.0.44), PR2000 (1.0.0.20), R6020 (1.0.0.26), R6050 (1.0.1.12), R6080 (1.0.0.26), R6120 (1.0.0.36), R6220 (1.1.0.60), R6700v2 (1.2.0.12), R6800 (1.2.0.12), R6900v2 (1.2.0.12), WNDR3700v5 (1.1.0.50), WNR1000v4 (1.1.0.44), WNR2020 (1.1.0.44), and WNR2050 (1.1.0.44) [1].