Volerion logoVolerion
Volerion logoVolerion

Netgear XR300 Stack-Based Buffer Overflow Vulnerability in HTTPD Service via usb_device.cgi

Vulnerability

A stack-based buffer overflow vulnerability has been identified in the Netgear XR300 router, specifically in version V1.0.3.38_10.3.30. The issue arises in the HTTPD service when processing POST requests through the usb_device.cgi endpoint, particularly with requests that include the share_name parameter.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition.

Added: Jul 15, 2025, 4:21 PM
Updated: Jul 15, 2025, 4:21 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.2
threat
6.4
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.