CVE-2019-5016CWE-200

An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least…

Critical · published June 17, 2019

CVSS v3.0
10.0
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

🔥 A crafted packet from an unauthenticated attacker can open the door to memory reads in your NETGEAR Nighthawk Router! Think of this as a sneaky delivery person who uses a bogus ID to access sensitive areas of a warehouse — they can read vital information without any checks in place. It's a vulnerability that just shouldn't be exposed! This vulnerability could lead to a denial of service or even remote information disclosure. Imagine an intruder having access to sensitive data just because they sent the right packet — that's absolutely devastating for any network!

Put simply

Think of this as a sneaky delivery person who uses a bogus ID to access sensitive areas of a warehouse — they can read vital information without any checks in place. It's a vulnerability that just shouldn't be exposed! The vulnerability exists in the KCodes NetUSB.ko kernel module, allowing arbitrary memory reads due to an invalid index value, which can be triggered by an unauthenticated attacker on the local network.

What to do

This vulnerability could lead to a denial of service or even remote information disclosure. Imagine an intruder having access to sensitive data just because they sent the right packet — that's absolutely devastating for any network! To protect yourself, patch your router firmware immediately to the latest version provided by NETGEAR or any affected vendor. Ensure that your local network is secured and monitor connected devices for any suspicious activity. You've got this! By taking action now, you can secure your network and keep those pesky intruders at bay. 🛡️

The record
Technical detail
CVSS v3.0
10.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03562 · 89.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-06-17T20:29Z
EPSS history
Timeline
  • 17 JUN 20:29Z
    An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least…
    cvelistv5