جزئیات آسیبپذیری
CVE-2025-5934
NETGEAR EX3700
Netgear EX3700 mtd sub_41619C stack-based overflow
CVSS 4.0
8.7بالا
شرح رسمی (انگلیسی)
A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function sub_41619C of the file /mtd. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C |
| 8.8بالا | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C |
| 9.0بالا | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| NETGEAR | EX3700 | 1.0.0.0 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.1 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.10 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.11 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.12 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.13 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.14 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.15 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.16 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.17 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.18 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.19 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.2 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.20 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.21 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.22 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.23 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.24 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.25 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.26 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.27 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.28 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.29 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.3 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.30 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.31 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.32 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.33 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.34 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.35 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.36 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.37 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.38 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.39 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.4 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.40 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.41 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.42 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.43 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.44 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.45 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.46 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.47 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.48 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.49 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.5 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.50 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.51 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.52 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.53 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.54 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.55 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.56 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.57 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.58 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.59 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.6 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.60 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.61 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.62 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.63 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.64 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.65 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.66 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.67 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.68 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.69 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.7 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.70 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.71 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.72 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.73 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.74 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.75 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.76 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.77 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.78 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.79 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.8 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.80 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.81 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.82 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.83 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.84 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.85 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.86 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.87 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.88 | CVEProject cvelistV5 (CNA) |
| NETGEAR | EX3700 | 1.0.0.9 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۶- https://vuldb.com/?id.311712 vdb-entrytechnical-description
- https://vuldb.com/?ctiid.311712 signaturepermissions-required
- https://vuldb.com/?submit.588258 third-party-advisory
- https://www.netgear.com/ product
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex3700-netgear#poc exploit
- https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex3700-netgear related
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۳/۲۰
- آخرین بهروزرسانی
- ۱۴۰۴/۰۳/۲۰
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- VulDB
پیشبینی بهرهبرداری (EPSS)
۱٫۱۱٪
احتمال بهرهبرداری در ۳۰ روز
۶۶٫۲٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- اثبات مفهوم
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-121Stack-based Buffer Overflow
- CWE-119Memory Corruption