Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
2024-11-05T15:15:24.970
2025-05-21T20:23:30.427
Analyzed
CVSSv3.1: 5.7 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | netgear | xr300_firmware | 1.0.3.78 | Yes |
Hardware | netgear | xr300 | - | No |
Operating System | netgear | r7000p_firmware | 1.3.3.154 | Yes |
Hardware | netgear | r7000p | - | No |
Operating System | netgear | r6400v2_firmware | 1.0.4.128 | Yes |
Hardware | netgear | r6400v2 | - | No |