CVE-2023-39550
High
Description
Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Netgear Jwnr2000v2 Firmware
PublishedAug 7, 2023
First seenAug 7, 2023
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear jwnr2000v2_firmware | 1.0.0.11 | — |
| netgear xwn5001_firmware | 0.4.1.1 | — |
| netgear xavn2001v2_firmware | 0.4.0.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.