CVE-2023-36187

—

CVSS 3.1

9.8 critical

EPSS

1%p65

Published

Sep 1, 2023 (Sep 1, 2023)

Modified

Jun 17, 2026

Description

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.

Vendors: netgear
Products: cbr40 firmware, lax20 firmware, mk62 firmware, mr60 firmware, ms60 firmware, rbw30 firmware, r6400 firmware, r6400v2 firmware, r6700v3 firmware, r7000 firmware, r7000p firmware, rax200 firmware
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.