Unauthenticated buffer overflow via pre-authentication request

Buffer overflow in NETGEAR routers and extenders before listed fixed versions allows remote attackers to cause unspecified impact via network requests. The pre-authentication request parser copies attacker-controlled data into a fixed-size buffer without adequate bounds checks; the vendor does not identify the exact function or parameter. Unauthenticated attackers on an adjacent network can reach the service without login, while consequences beyond the overflow are not disclosed.