| Title | 複数の NETGEAR デバイスにおける境界外書き込みに関する脆弱性 |
|---|---|
| Summary | 複数の NETGEAR デバイスには、境界外書き込みに関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | March 18, 2021, midnight |
| Registration Date | Nov. 25, 2021, 12:10 p.m. |
| Last Update | Nov. 25, 2021, 12:10 p.m. |
| CVSS3.0 : 重要 | |
| Score | 8.4 |
|---|---|
| Vector | CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| CVSS2.0 : 警告 | |
| Score | 5.2 |
|---|---|
| Vector | AV:A/AC:L/Au:S/C:P/I:P/A:P |
| ネットギア |
| MK62 ファームウェア 1.0.6.110 未満 |
| MR60 ファームウェア 1.0.6.110 未満 |
| MS60 ファームウェア 1.0.6.110 未満 |
| R7900P ファームウェア 1.4.1.66 未満 |
| R7960P ファームウェア 1.4.1.66 未満 |
| R8000P ファームウェア 1.4.1.66 未満 |
| RAX15 ファームウェア 1.0.2.82 未満 |
| RAX20 ファームウェア 1.0.2.82 未満 |
| RAX45 ファームウェア 1.0.2.72 未満 |
| RAX50 ファームウェア 1.0.2.72 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2021年11月25日] 掲載 |
Nov. 25, 2021, 12:10 p.m. |
| Summary | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8000P before 1.4.1.66, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, R7960P before 1.4.1.66, R7900P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RAX80 before 1.0.3.106, and RAX200 before 1.0.3.106. |
|---|---|
| Publication Date | March 23, 2021, 4:15 p.m. |
| Registration Date | March 23, 2021, 8:03 p.m. |
| Last Update | Nov. 21, 2024, 3 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* | 1.4.1.66 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:mk62_firmware:*:*:*:*:*:*:*:* | 1.0.6.110 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:mk62:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | 1.0.6.110 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | 1.0.6.110 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* | 1.4.1.66 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:* | 1.4.1.66 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:* | 1.0.2.82 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* | 1.0.2.82 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | 1.0.2.72 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | 1.0.2.72 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:* | 1.0.3.106 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* | 1.0.3.106 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* | 1.0.3.106 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* | ||||