CVE-2022-44197

Vulnerability

Netgear R7000P firmware version V1.3.0.8 is vulnerable to a buffer overflow via the openvpn_server_ip parameter. The vulnerability resides in the handling of this parameter, which can be exploited when processing crafted input.

Exploitation

An attacker with network access to the device can send a specially crafted request containing an overly long value for the openvpn_server_ip parameter. The exact exploitation steps are not disclosed in the available references.

Impact

Successful exploitation could allow an attacker to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The full impact scope is not detailed in public sources.

Mitigation

As of the publication date, no firmware update has been released to address this vulnerability. Users should monitor NETGEAR's security advisory page [1] for future patches. No workaround is documented.