CVE-2023-36187

CriticalCVSS 9.8

Published: 01/09/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.94%

56th percentile - higher than 56% of all known CVEs

Summary

CVE-2023-36187 describes a buffer overflow vulnerability in NETGEAR R6400v2 devices before version 1.0.4.118, allowing remote unauthenticated attackers to execute arbitrary code via a crafted URL to httpd.

Risk Assessment

Attackers could exploit this vulnerability to remotely take control of the device, posing a serious security threat to the organization's network.

Recommendation

It is recommended to update the NETGEAR R6400v2 firmware to version 1.0.4.118 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd.