CVE-2022-37235

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware

Critical · published September 23, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

🔥 A buffer overflow vulnerability in the Netgear Nighthawk AC1900 router could let attackers have their way — and they don’t even need a password! ⚡ Think of this as a crowded elevator where one person keeps pushing the button to floors they don’t have access to, causing the whole system to freeze. Eventually, the elevator might just stop working entirely, leaving everyone inside vulnerable to whatever comes next. An attacker could exploit this vulnerability to crash the router, potentially gaining unauthorized access to the network and all devices connected to it. This means sensitive data could be exposed, leaving your personal information wide open for the taking! Imagine an intruder taking control of your home network - absolutely devastating!

Put simply

Think of this as a crowded elevator where one person keeps pushing the button to floors they don’t have access to, causing the whole system to freeze. Eventually, the elevator might just stop working entirely, leaving everyone inside vulnerable to whatever comes next. This vulnerability originates from the `strncat` function in the `wl` binary, allowing overly long input to overwrite the stack, which can lead to remote code execution.

What to do

An attacker could exploit this vulnerability to crash the router, potentially gaining unauthorized access to the network and all devices connected to it. This means sensitive data could be exposed, leaving your personal information wide open for the taking! Imagine an intruder taking control of your home network - absolutely devastating! Immediately update your Netgear Nighthawk AC1900 router to the latest firmware version. Ensure that all devices connected to the network are also secured and consider enabling additional firewall protections. Don't wait — patch now! You’ve got this! With a few quick updates, you can fortify your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01231 · 68.7th percentile
Published
2022-09-23T00:06Z
EPSS history
Timeline
  • 23 SEP 00:06Z
    Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware
    cvelistv5