CVE-2022-31937

EUVD-2022-53235
Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
netgearwnr2000v4_firmware
1.0.0.70
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/Davidteeri/Bug-Report/blob/main/netgear-n300-0x4297B4.md
https://www.netgear.com/about/security/
https://www.netgear.com/support/download/?model=WNR2000v4
https://github.com/Davidteeri/Bug-Report/blob/main/netgear-n300-0x4297B4.md
https://www.netgear.com/about/security/
https://www.netgear.com/support/download/?model=WNR2000v4