CVE-2023-36187
Published: 01 September 2023
Summary
CVE-2023-36187 is a critical-severity Classic Buffer Overflow (CWE-120) vulnerability in Netgear Cbr40 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 9.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-36187 is a buffer overflow vulnerability, tracked as CWE-120, that affects the httpd component of NETGEAR R6400v2 wireless routers running firmware versions prior to 1.0.4.118. The issue received a CVSS 3.1 base score of 9.8, reflecting network-accessible attack vectors that require no authentication or user interaction.
Unauthenticated remote attackers can exploit the flaw by submitting a specially crafted URL to the device's web server, resulting in arbitrary code execution with full control over the affected router.
The vendor advisory PSV-2020-0578, published by NETGEAR, identifies the condition as a pre-authentication buffer overflow and directs users to upgrade to firmware 1.0.4.118 or later to eliminate the exposure. The associated EPSS score has remained flat at 0.0593 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-40166
Vulnerability details
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Platform-independent managed code eliminates the need for unchecked native buffer copies that are the root cause of classic buffer overflows.