CVE-2022-48322

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability

Critical · published February 13, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

🔥 A sneaky stack-based buffer overflow is lurking in NETGEAR Nighthawk WiFi Mesh systems and routers — and it’s affecting several models that most folks rely on! ⚡ Think of a stack-based buffer overflow like an overstuffed suitcase that bursts open at the airport. If you pack too much in without checking, it can spill everywhere and cause a mess, just like how this flaw can let attackers overflow memory and take control! An attacker could exploit this vulnerability, leading to complete system compromise — they could access sensitive information, change settings, or even take over your entire network! Imagine the chaos if someone hijacks your home WiFi and all your connected devices!

Put simply

Think of a stack-based buffer overflow like an overstuffed suitcase that bursts open at the airport. If you pack too much in without checking, it can spill everywhere and cause a mess, just like how this flaw can let attackers overflow memory and take control! This stack-based buffer overflow occurs when the input exceeds the buffer's capacity, potentially allowing an attacker to execute arbitrary code on affected NETGEAR devices. Specifically, it affects MR60, MS60, R6900P, R7000P, R7960P, and R8000P models before their respective patched versions.

What to do

An attacker could exploit this vulnerability, leading to complete system compromise — they could access sensitive information, change settings, or even take over your entire network! Imagine the chaos if someone hijacks your home WiFi and all your connected devices! Immediately update your NETGEAR routers to the latest firmware: MR60 and MS60 to version 1.1.7.132, R6900P and R7000P to 1.3.3.154, and R7960P and R8000P to 1.4.4.94. Also, consider enabling additional security features to protect your devices further! You've got this! With these updates, you'll have your network secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00682 · 51.9th percentile
Published
2023-02-13T00:00Z
EPSS history
Timeline
  • 13 FEB 00:00Z
    NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability
    cvelistv5