Security readout for executives and security teams
Plain-English summary
Two older NETGEAR DSL modem/router models have a pre-authentication stack overflow flaw. If vulnerable firmware is still in use, an attacker on the adjacent network path may be able to affect confidentiality, integrity, and availability. The source bundle does not show active exploitation.
Executive priority
Treat as a moderate legacy-network risk. Prioritize quick inventory and firmware verification, especially in small offices, branch networks, or environments where modem/router administration interfaces are reachable by untrusted users.
Technical view
CVE-2019-20716 affects NETGEAR DGN2200v4 before 1.0.0.110 and DGND2200Bv4 before 1.0.0.109. The issue is described as a stack-based buffer overflow before authentication. CVSS 3.0 is 6.8, with adjacent-network attack vector and high C/I/A impacts, though the vector includes PR:H while the description says unauthenticated.
Likely exposure
Exposure is likely limited to organizations still operating these older NETGEAR DGN2200v4 or DGND2200Bv4 devices on vulnerable firmware, especially where untrusted users can reach the device management or network-facing service surface.
Exploitation context
No CISA KEV listing or source-bundle evidence of active exploitation is provided. The issue is pre-authentication per NETGEAR/CVE text, but the CVSS vector suggests adjacent-network reach and contains a privilege requirement inconsistency.
Researcher notes
The source metadata is incomplete: affected CPE fields are n/a, and the CVSS privileges field conflicts with the unauthenticated description. Validate exposure by firmware/version evidence and vendor advisory, not by generic product matching alone.
Mitigation direction
- Update DGN2200v4 to firmware 1.0.0.110 or later.
- Update DGND2200Bv4 to firmware 1.0.0.109 or later.
- Check NETGEAR advisory PSV-2018-0241 for model-specific guidance.
- Restrict management access to trusted networks only.
- Retire unsupported legacy devices where firmware cannot be verified.
Validation and detection
- Inventory NETGEAR DGN2200v4 and DGND2200Bv4 devices.
- Confirm each device firmware version against the fixed versions.
- Review network paths that can reach device administration services.
- Check vulnerability scanners for authenticated firmware/version findings.
- Document exceptions where devices cannot be updated or replaced.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2019-20716 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.8 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N0.95.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
6.8MediumVector: CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:U/UI:N
Source materials
- CVE List V5 sourceCVE List V5
- https://kb.netgear.com/000061212/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-DGN2200v4-and-DGND2200Bv4-PSV-2018-0241CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.