A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NETGEAR | RBR860 | unaffected |
|
||||||
| NETGEAR | RBRE950 | unaffected |
|
||||||
| NETGEAR | RBRE960 | unaffected |
|
||||||
| NETGEAR | RBE970 | unaffected |
|
||||||
| NETGEAR | RBE971 | unaffected |
|
||||||
| NETGEAR | RBS860 | unaffected |
|
||||||
| NETGEAR | RBSE950 | unaffected |
|
||||||
| NETGEAR | RBSE960 | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Netgear | Rbe970 |
|
||||||||
| Netgear | Rbe971 |
|
||||||||
| Netgear | Rbr860 |
|
||||||||
| Netgear | Rbre950 |
|
||||||||
| Netgear | Rbre960 |
|
||||||||
| Netgear | Rbs860 |
|
||||||||
| Netgear | Rbse950 |
|
||||||||
| Netgear | Rbse960 |
|
Vendor Solution
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satellite V9.10.1.4 https://www.netgear.com/support/product/rbe970/ RBE971 Orbi Quad-band Mesh WiFi 7 Router V9.10.1.4 https://www.netgear.com/support/product/rbe971/ RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series V7.2.7.15 https://www.netgear.com/support/product/rbr860/ RBRE950 Orbi Quad-band Mesh WiFi 6E Router v7.2.7.15 https://www.netgear.com/support/product/rbre950/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V7.2.7.15 https://www.netgear.com/support/product/rbre960/ RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series V7.2.7.15 https://www.netgear.com/support/product/rbs860/ RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite v7.2.7.15 https://www.netgear.com/support/product/rbse950/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.7.15 https://www.netgear.com/support/product/rbse960/
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.325% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Netgear
Netgear rbe970 Netgear rbe971 Netgear rbr860 Netgear rbre950 Netgear rbre960 Netgear rbs860 Netgear rbse950 Netgear rbse960 |
|
| Vendors & Products |
Netgear
Netgear rbe970 Netgear rbe971 Netgear rbr860 Netgear rbre950 Netgear rbre960 Netgear rbs860 Netgear rbse950 Netgear rbse960 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable. | |
| Title | A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models | |
| Weaknesses | CWE-121 | |
| References |
| |
| Metrics |
cvssV4_0
|