CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd

published December 8, 2023

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

⚠️ A stack-based buffer overflow lurks in the Netgear Orbi RBR750 firmware, waiting for the right moment! Think of this flaw like a kitchen that overfills a pot on the stove — when it spills over, everything gets messy fast. If an attacker stokes the flames just right, they could cause some serious problems! In the worst-case scenario, an attacker could potentially execute arbitrary code on the device. While we’re not seeing active exploits just yet, this kind of oversight can lead to total chaos!

Put simply

Think of this flaw like a kitchen that overfills a pot on the stove — when it spills over, everything gets messy fast. If an attacker stokes the flames just right, they could cause some serious problems! This vulnerability occurs due to improper handling of incoming requests by the httpd server, allowing excess data to overflow the stack and overwrite adjacent memory.

What to do

In the worst-case scenario, an attacker could potentially execute arbitrary code on the device. While we’re not seeing active exploits just yet, this kind of oversight can lead to total chaos! Update your Netgear Orbi RBR750 firmware to version 7.2.6.21 or later to close this security gap. Regularly check for firmware updates to keep your device secure! You've got this! With just a quick firmware update, you'll have your network fortified in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08972 · 95.3th percentile
Published
2023-12-08T00:00Z
EPSS history
Timeline
  • 08 DEC 00:00Z
    In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd
    cvelistv5