Buffer overflow vulnerability in some NETGEAR Nighthawk routers
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NETGEAR | RAX41 | unaffected |
|
||||||
| NETGEAR | RAX41v2 | unaffected |
|
||||||
| NETGEAR | RAX42 | unaffected |
|
||||||
| NETGEAR | RAX42v2 | unaffected |
|
||||||
| NETGEAR | RAX43 | unaffected |
|
||||||
| NETGEAR | RAX43v2 | unaffected |
|
||||||
| NETGEAR | RAX49S | unaffected |
|
||||||
| NETGEAR | RAX50 | unaffected |
|
||||||
| NETGEAR | RAX50v2 | unaffected |
|
||||||
| NETGEAR | RAX54S | unaffected |
|
||||||
| NETGEAR | RAX54Sv2 | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Netgear | Rax41 |
|
||||||||
| Netgear | Rax41v2 |
|
||||||||
| Netgear | Rax42 |
|
||||||||
| Netgear | Rax42v2 |
|
||||||||
| Netgear | Rax43 |
|
||||||||
| Netgear | Rax43v2 |
|
||||||||
| Netgear | Rax49s |
|
||||||||
| Netgear | Rax50 |
|
||||||||
| Netgear | Rax50v2 |
|
||||||||
| Netgear | Rax54s |
|
||||||||
| Netgear | Rax54sv2 |
|
Vendor Solution
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRAX41 (EoS) Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41/ RAX41v2 Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42/ RAX42v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42v2/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43/ RAX43v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43v2/ RAX49S Nighthawk AX6 6-Stream AX5300 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax49s/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50/ RAX50v2 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50v2/ RAX54S Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54s/ RAX54Sv2 Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54sv2/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.776% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear rax41 Firmware
Netgear rax41v2 Firmware Netgear rax42 Firmware Netgear rax42v2 Firmware Netgear rax43 Firmware Netgear rax43v2 Firmware Netgear rax49s Firmware Netgear rax50 Firmware Netgear rax50v2 Firmware Netgear rax54s Firmware Netgear rax54sv2 Firmware |
|
| CPEs | cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax41v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax42v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax43v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax49s:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax50v2:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax54s:-:*:*:*:*:*:*:* cpe:2.3:h:netgear:rax54sv2:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax54s_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Netgear rax41 Firmware
Netgear rax41v2 Firmware Netgear rax42 Firmware Netgear rax42v2 Firmware Netgear rax43 Firmware Netgear rax43v2 Firmware Netgear rax49s Firmware Netgear rax50 Firmware Netgear rax50v2 Firmware Netgear rax54s Firmware Netgear rax54sv2 Firmware |
|
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear
Netgear rax41 Netgear rax41v2 Netgear rax42 Netgear rax42v2 Netgear rax43 Netgear rax43v2 Netgear rax49s Netgear rax50 Netgear rax50v2 Netgear rax54s Netgear rax54sv2 |
|
| Vendors & Products |
Netgear
Netgear rax41 Netgear rax41v2 Netgear rax42 Netgear rax42v2 Netgear rax43 Netgear rax43v2 Netgear rax49s Netgear rax50 Netgear rax50v2 Netgear rax54s Netgear rax54sv2 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device. | |
| Title | Buffer overflow vulnerability in some NETGEAR Nighthawk routers | |
| Weaknesses | CWE-121 | |
| References |
|
|
| Metrics |
cvssV4_0
|