Unrated severityNVD Advisory· Published Aug 7, 2023· Updated Oct 11, 2024

CVE-2023-38922

Description

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/JWNR2000v2cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = v1.0.0.11
Netgear/XWN5001llm-fuzzy
Range: = v0.4.1.1
Netgear/XAVN2001v2llm-fuzzy
Range: = v0.4.0.7

Patches

Vulnerability mechanics

References

github.com/FirmRec/IoT-Vulns/blob/main/netgear/http_passwd_auth/README.mdmitre
www.netgear.com/about/security/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000