A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been classified as critical. Affected is the function sub_4238E8. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/jylsec/vuldb/blob/main/Netgear/netgear_JWNR2000v2/Buffer_overflow-sub_4238E8-log_type/README.md | Broken Link |
| https://vuldb.com/?ctiid.306600 | Permissions Required VDB Entry |
| https://vuldb.com/?id.306600 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.560774 | Third Party Advisory VDB Entry |
| https://www.netgear.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
13 May 2025, 20:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:h:netgear:jwnr2000v2:-:*:*:*:*:*:*:* cpe:2.3:o:netgear:jwnr2000v2_firmware:1.0.0.11:*:*:*:*:*:*:* |
|
| First Time |
Netgear jwnr2000v2
Netgear Netgear jwnr2000v2 Firmware |
|
| References | () https://github.com/jylsec/vuldb/blob/main/Netgear/netgear_JWNR2000v2/Buffer_overflow-sub_4238E8-log_type/README.md - Broken Link | |
| References | () https://www.netgear.com/ - Product | |
| References | () https://vuldb.com/?ctiid.306600 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.560774 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.306600 - Third Party Advisory, VDB Entry |
30 Apr 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-30 14:15
Updated : 2025-05-13 20:28
NVD link : CVE-2025-4120
Mitre link : CVE-2025-4120
JSON object : View
Products Affected
netgear
- jwnr2000v2
- jwnr2000v2_firmware