CVE-2020-28373

moderate-risk

Published 2020-11-09

upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.3.2.126_10.1.66, XR300 V1.0.3.50_10.3.36, R8000 V1.0.4.62, R8300 V1.0.2.136, R8500 V1.0.2.136, R7300DST V1.0.0.74, R7850 V1.0.5.64, R7900 V1.0.4.30, RAX20 V1.0.2.64, RAX80 V1.0.3.102, and R6250 V1.0.4.44.

Do I need to act?

0.11% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

ADJACENT_NETWORK / LOW complexity

Affected Products (13)

R6400V2 Firmware

R6400 Firmware

R7000P Firmware

Xr300 Firmware

R8000 Firmware

R8300 Firmware

R8500 Firmware

R7300Dst Firmware

R7850 Firmware

R7900 Firmware

Rax20 Firmware

Rax80 Firmware

R6250 Firmware

Affected Vendors

Netgear

References (2)

Broken Link https://github.com/cpeggg/Netgear-upnpd-poc

/ 100

moderate-risk

Severity 27/34 · High

Exploitability 0/34 · Minimal

Exposure 17/34 · Moderate