CVE-2023-38922

HighCVSS 8.8

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

45th percentile - higher than 45% of all known CVEs

Summary

Multiple buffer overflows were discovered in Netgear devices JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 via the http_passwd and http_username parameters in the update_auth function.

Risk Assessment

Buffer overflows may lead to remote code execution, posing a significant security risk to the devices and the organization's network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in Netgear JWNR2000v2, XWN5001, XAVN2001v2

CVE-2023-39550High
Multiple buffer overflows were discovered in Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 via the http_passwd and http_username parameters in the check_auth function.

Original NVD description (English source)

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the update_auth function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS