CVE-2026-0413
בינונית 4.5
תיאור (מקור, אנגלית)
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
מדדים
- CVSS 3.1
-
4.5 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS 4.0
-
4.3 (MEDIUM)
מקור הציון: CNA
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-9/8/2026
- CWE
- CWE-121
מוצרים מושפעים
netgear: rbe370 firmware; netgear: rbe370; netgear: rbe770 firmware; netgear: rbe770; netgear: rbr750 firmware; netgear: rbr750; netgear: rbr840 firmware; netgear: rbr840; netgear: rbr850 firmware; netgear: rbr850; netgear: rbr860 firmware; netgear: rbr860; netgear: rbre950 firmware; netgear: rbre950; netgear: rbre960 firmware
קישורים
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory Vendor Advisory
- https://www.netgear.com/support/product/rbe372/ Product
- https://www.netgear.com/support/product/rbe770/ Product
- https://www.netgear.com/support/product/rbr750/ Product
- https://www.netgear.com/support/product/rbr840/ Product
- https://www.netgear.com/support/product/rbr850/ Product
- https://www.netgear.com/support/product/rbr860/ Product
- https://www.netgear.com/support/product/rbre950/ Product
- https://www.netgear.com/support/product/rbre960/ Product
- https://www.netgear.com/support/product/rbs750/ Product