CVE-2019-5016: kcodes netusb.ko

Vulnerability summary

CVE-2019-5016 is a critical (CVSS 10.0) vulnerability in kcodes netusb.ko. EPSS estimates a 3.56% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities.

Timeline

1. 17-06-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory read, resulting in a denial of service or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to trigger this vulnerability.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.