CVE-2023-39550

HighCVSS 8.8

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

55th percentile - higher than 55% of all known CVEs

Summary

Multiple buffer overflows were discovered in Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 via the http_passwd and http_username parameters in the check_auth function.

Risk Assessment

Buffer overflows may lead to remote code execution, posing a serious security threat to the devices and the organization's network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate these vulnerabilities.

Other vulnerabilities in Netgear JWNR2000v2, XWN5001, XAVN2001v2

CVE-2023-38922High
Multiple buffer overflows were discovered in Netgear devices JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 via the http_passwd and http_username parameters in the update_auth function.

Original NVD description (English source)

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_username parameters in the check_auth function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS