Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-02646
HistoryJan 03, 2022 - 12:00 a.m.

Netgear Genie Permissions Licensing and Access Control Issues Vulnerability

2022-01-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
netgear
genie
installer
macos
access control
vulnerability
permission
licensing
elevation of privileges
local access

EPSS

0

Percentile

5.1%

Netgear genie, a Netgear program that presents itself as a dashboard, is vulnerable to a permission and access control issue in Netgear Genie Installer for macOS, which stems from the fact that all known versions of Netgear Genie Installer contain a local elevation of privileges vulnerability. The macOS version of Netgear Genie Installer handles certain files in an insecure manner. An attacker with local access to the endpoint where the software is to be installed could exploit the vulnerability to overwrite certain files to gain elevated privileges to root.

EPSS

0

Percentile

5.1%

Related for CNVD-2022-02646