Vulnerability · Published Dec 27, 2024 · Assigned by VulDB

CVE-2024-12988Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow

High 7.3

In plain English

A high-severity buffer overflow in R6900P from Netgear. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.9%top 40.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products (as reported)

Vendor	Product	Versions
Netgear	R6900P	1.3.3.154
Netgear	R7000P	1.3.3.154

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

VDB-289381 | Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow vdb-entry, technical-description
VDB-289381 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #462781 | Netgear R6900P, R7000P 1.3.3.154 Buffer Overflow third-party-advisory
https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154 exploit
https://www.netgear.com/about/eos/ related
https://www.netgear.com/ product