EUVD-2025-17624
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function sub_41619C of the file /mtd. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.
Analysis
A critical stack-based buffer overflow vulnerability (CVE-2025-5934) exists in Netgear EX3700 wireless extenders up to version 1.0.0.88, affecting the sub_41619C function in the /mtd file. An authenticated attacker can remotely exploit this vulnerability to achieve complete system compromise including confidentiality, integrity, and availability breaches. Public exploit code is available, and while the affected product line is no longer supported by Netgear, immediate patching to version 1.0.0.98 is critical for active deployments.
Technical Context
The vulnerability is a stack-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in the Netgear EX3700 firmware's /mtd partition handling, specifically in the sub_41619C function. The EX3700 is a WiFi range extender running proprietary Netgear firmware. Stack-based overflows allow attackers to overwrite return addresses and stack variables, enabling arbitrary code execution. The /mtd designation suggests this affects the MTD (Memory Technology Device) layer or firmware region, likely involved in device configuration or upgrade mechanisms. The CWE-119 classification indicates unsafe buffer operations without proper bounds checking on stack-allocated buffers.
Affected Products
Netgear EX3700 wireless range extender firmware versions up to and including 1.0.0.88. CPE string would be: cpe:2.3:h:netgear:ex3700:*:*:*:*:*:*:*:* with firmware versions <=1.0.0.88. No specific references to affected configurations (e.g., regional variants) are detailed. The product is end-of-life with no further vendor support.
Remediation
Immediate remediation: Upgrade Netgear EX3700 firmware to version 1.0.0.98 or later. Steps: (1) Access extender management interface (typically 192.168.0.1 or mywifi.net); (2) Navigate to Administration/Firmware Update; (3) Download firmware 1.0.0.98+ from Netgear support site (https://www.netgear.com/support/); (4) Apply update and verify version post-restart. For organizations unable to upgrade: isolate affected devices on separate VLANs, restrict administrative access via firewall rules, and consider replacement with supported hardware. No known workarounds exist for stack-based overflow vulnerabilities—patching is mandatory. Given end-of-life status, verify firmware availability through Netgear legacy support channels.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today