CVE-2023-45468

Vulnerability

A buffer overflow vulnerability exists in the pingWdogIp parameter of the Netis N3Mv2 router firmware version Netis N3Mv2-V1.0.1.865. The flaw occurs when the router processes a crafted input for this parameter, leading to memory corruption. The affected version is the only one confirmed vulnerable [1].

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted request to the router's management interface, targeting the pingWdogIp parameter. No authentication is required if the interface is exposed to the network, allowing an unauthenticated remote attacker to trigger the overflow [1].

Impact

Successful exploitation causes a denial of service (DoS), rendering the router unresponsive or crashing it. This disrupts normal network operations and may require a physical reboot to restore functionality [1].

Mitigation

As of the publication date, no official fix has been released. Users should restrict access to the router's management interface to trusted networks only and monitor the vendor's website for firmware updates. If possible, consider replacing the device if it reaches end-of-life [1].