Lucene search

ZdiCVE-2022-27641

HistoryMar 29, 2023 - 7:15 p.m.

CVE-2022-27641

2023-03-2919:15:08

CWE-190

zdi

web.nvd.nist.gov

cve-2022-27641

netgear

r6700v3

router

code execution

vulnerability

netusb

zdi-can-15806

nvd

integer overflow

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

32.9%

JSON

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15806.

Affected configurations

Nvd

Vulners

Node

netgeard7800_firmwareRange<1.0.1.68

AND

netgeard7800Match-

Node

netgearex6200_firmwareRange<1.0.1.90

AND

netgearex6200Matchv2

Node

netgearex8000_firmwareRange<1.0.1.240

AND

netgearex8000Match-

Node

netgearr6220_firmwareRange<1.1.0.112

AND

netgearr6220Match-

Node

netgearr6230_firmwareRange<1.1.0.112

AND

netgearr6230Match-

Node

netgearr6400_firmwareRange<1.0.4.122

AND

netgearr6400Matchv2

Node

netgearr6700_firmwareRange<1.0.4.122

AND

netgearr6700Matchv3

Node

netgearr7000_firmwareRange<1.0.11.130

AND

netgearr7000Match-

Node

netgearr7800_firmwareRange<1.0.2.90

AND

netgearr7800Match-

VendorProductVersionCPE
netgeard7800_firmware*cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*
netgeard7800-cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*
netgearex6200_firmware*cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:*
netgearex6200v2cpe:2.3:h:netgear:ex6200:v2:*:*:*:*:*:*:*
netgearex8000_firmware*cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*
netgearex8000-cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*
netgearr6220_firmware*cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*
netgearr6220-cpe:2.3:h:netgear:r6220:-:*:*:*:*:*:*:*
netgearr6230_firmware*cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*
netgearr6230-cpe:2.3:h:netgear:r6230:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	d7800_firmware	*	cpe:2.3:o:netgear:d7800_firmware::::::::
netgear	d7800	-	cpe:2.3:h:netgear:d7800:-:::::::*
netgear	ex6200_firmware	*	cpe:2.3:o:netgear:ex6200_firmware::::::::
netgear	ex6200	v2	cpe:2.3:h:netgear:ex6200:v2:::::::*
netgear	ex8000_firmware	*	cpe:2.3:o:netgear:ex8000_firmware::::::::
netgear	ex8000	-	cpe:2.3:h:netgear:ex8000:-:::::::*
netgear	r6220_firmware	*	cpe:2.3:o:netgear:r6220_firmware::::::::
netgear	r6220	-	cpe:2.3:h:netgear:r6220:-:::::::*
netgear	r6230_firmware	*	cpe:2.3:o:netgear:r6230_firmware::::::::
netgear	r6230	-	cpe:2.3:h:netgear:r6230:-:::::::*

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "vendor": "NETGEAR",
    "product": "R6700v3",
    "versions": [
      {
        "version": "1.0.4.120_10.0.91",
        "status": "affected"
      }
    ]
  }
]

References

kb.netgear.com/000064437/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0278

www.zerodayinitiative.com/advisories/ZDI-22-544/

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

32.9%

JSON

Related for CVE-2022-27641