Vulnerabilities > CVE-2019-5055 - NULL Pointer Dereference vulnerability in Netgear Wnr2000 Firmware 1.0.0.70

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
netgear
CWE-476
NVD
Published: 2019-09-11
Updated: 2024-11-21

Summary

An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with Firmware Version V1.0.0.70) wireless router. A SOAP request sent in an invalid sequence to the <WFAWLANConfig:1#PutMessage> service can cause a null pointer dereference, resulting in the hostapd service crashing. An unauthenticated attacker can send a specially-crafted SOAP request to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
OS
Netgear
1
Hardware
Netgear
1

Common Weakness Enumeration (CWE)

Talos

idTALOS-2019-0832
last seen2019-09-24
published2019-09-09
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0832
titleNETGEAR N300 WNR2000v5 unauthenticated host access point daemon denial-of-service vulnerability

References