CVE-2019-20697

High

Description

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48.

SeverityHigh
CVSS8.8
Exploit probability—
ProductNetgear Gs728tpp Firmware
PublishedApr 16, 2020
First seenApr 16, 2020

How to fix

Update
  • netgear gs728tpp_firmware6.0.0.48 or later
  • netgear gs728tp_firmware6.0.0.48 or later
  • netgear gs750e_firmware1.0.1.4 or later
  • netgear gs752tpp_firmware6.0.0.48 or later
  • netgear gs752tp_firmware6.0.0.48 or later

Affected products

ProductAffected versionsFixed in
netgear gs728tpp_firmwarev < 6.0.0.486.0.0.48
netgear gs728tp_firmwarev < 6.0.0.486.0.0.48
netgear gs750e_firmwarev < 1.0.1.41.0.1.4
netgear gs752tpp_firmwarev < 6.0.0.486.0.0.48
netgear gs752tp_firmwarev < 6.0.0.486.0.0.48

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.