CVE-2022-44199

Vulnerability

A buffer overflow vulnerability exists in Netgear R7000P router firmware version V1.3.1.64. The flaw is triggered via the openvpn_server_ip parameter, likely during processing of OpenVPN configuration. The exact code path requires further analysis, but the parameter is user-controlled. [1]

Exploitation

An attacker with network access to the router's management interface or able to inject malicious input into the VPN configuration could exploit this. No authentication is mentioned, but typically the management interface requires admin credentials. The attacker would send a crafted request with an overly long openvpn_server_ip value to overflow a buffer. [1]

Impact

Successful exploitation can lead to buffer overflow, which may allow arbitrary code execution with root privileges on the device, potentially compromising the entire home network. The CIA impact is high: full compromise of confidentiality, integrity, and availability. [1]

Mitigation

Netgear has not released a patch as of the publication date. Users should monitor Netgear's security advisory page for updates. As a workaround, disable VPN server functionality or restrict access to the router's management interface. The product may be end-of-life, but no official statement is found. [1]