CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-36187
Critical (9.8) in netgear. EPSS 1.1% chance of exploitation in the next 30 days.
Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:cbr40_firmware
- netgear:lax20_firmware
- netgear:mk62_firmware
- netgear:mr60_firmware
- netgear:ms60_firmware
- netgear:r6400_firmware
- netgear:r6400v2_firmware
- netgear:r6700v3_firmware
- netgear:r7000_firmware
- netgear:r7000p_firmware
- netgear:rax200_firmware
- netgear:rax75_firmware
- netgear:rax80_firmware
- netgear:rbw30_firmware
- netgear:rs400_firmware