CVE-2023-49007
Published: 08 December 2023
Summary
CVE-2023-49007 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Netgear Rbr750 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 7.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2023-49007 is a stack-based buffer overflow vulnerability, tracked under CWE-787, that affects the /usr/sbin/httpd component in Netgear Orbi RBR750 firmware versions prior to V7.2.6.21. The flaw carries a CVSS 3.1 base score of 9.8, reflecting network attack vectors with no required authentication or user interaction.
An unauthenticated remote attacker can send specially crafted HTTP requests to the web server process, triggering the overflow to corrupt the stack and potentially execute arbitrary code with full system privileges on the affected device.
The provided references point to a public GitHub repository containing technical details and proof-of-concept material for the issue; the firmware description indicates that upgrading to version V7.2.6.21 or later addresses the buffer overflow. The associated EPSS score has remained flat at 0.0819 with no material increase observed since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-53031
Vulnerability details
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.