CVE-2022-27644

🗓️ 29 Mar 2023 00:00:00Reported by zdiType

Vulnerability in NETGEAR R6700v3 1.0.4.120_10.0.91 routers allows unauthenticated network-adjacent attackers to compromise file integrity via HTTPS

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Stack-based Buffer Overflow in Netgear R6400_Firmware	1 Jun 202305:10	–	githubexploit
Circl	CVE-2022-27644	29 Mar 202322:31	–	circl
CNNVD	NETGEAR R6700v3 信任管理问题漏洞	23 Mar 202200:00	–	cnnvd
CNVD	NETGEAR R6700v3 Trust Management Issues Vulnerability	25 Mar 202200:00	–	cnvd
Cvelist	CVE-2022-27644	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-32145	3 Oct 202520:07	–	euvd
NVD	CVE-2022-27644	29 Mar 202319:15	–	nvd
OSV	CVE-2022-27644	29 Mar 202319:15	–	osv
Prion	Design/Logic Flaw	29 Mar 202319:15	–	prion
Positive Technologies	PT-2021-6475 · NetGear · Netgear R6400V2 +6	1 Dec 202100:00	–	ptsecurity

NVD

Vulners

Node

netgear r6400_firmwareRange<1.0.4.126

AND

netgear r6400Matchv2

Node

netgear r6700_firmwareRange<1.0.4.126

AND

netgear r6700Matchv3

Node

netgear r6900p_firmwareRange<1.3.3.148

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareRange<1.0.11.134

AND

netgear r7000Match-

Node

netgear r7000p_firmwareRange<1.3.3.148

AND

netgear r7000pMatch-

Node

netgear r7850_firmwareRange<1.0.5.84

AND

netgear r7850Match-

Node

netgear r7960p_firmwareRange<1.4.3.88

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.84

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.3.88

AND

netgear r8000pMatch-

Node

netgear rax200_firmwareRange<1.0.6.138

AND

netgear rax200Match-

Node

netgear rax75_firmwareRange<1.0.6.138

AND

netgear rax75Match-

Node

netgear rax80_firmwareRange<1.0.6.138

AND

netgear rax80Match-

Node

netgear rs400_firmwareRange<1.5.1.86

AND

netgear rs400Match-

Node

netgear cbr40_firmwareRange<2.5.0.28

AND

netgear cbr40Match-

Node

netgear lbr1020_firmwareRange<2.7.4.2

AND

netgear lbr1020Match-

Node

netgear lbr20_firmwareRange<2.7.4.2

AND

netgear lbr20Match-

Node

netgear rbr10_firmwareRange<2.7.4.24

AND

netgear rbr10Match-

Node

netgear rbr20_firmwareRange<2.7.4.24

AND

netgear rbr20Match-

Node

netgear rbr40_firmwareRange<2.7.4.24

AND

netgear rbr40Match-

Node

netgear rbr50_firmwareRange<2.7.4.24

AND

netgear rbr50Match-

Node

netgear rbs10_firmwareRange<2.7.4.24

AND

netgear rbs10Match-

Node

netgear rbs20_firmwareRange<2.7.4.24

AND

netgear rbs20Match-

Node

netgear rbs40_firmwareRange<2.7.4.24

AND

netgear rbs40Match-

Node

netgear rbs50_firmwareRange<2.7.4.24

AND

netgear rbs50Match-

[
  {
    "vendor": "NETGEAR",
    "product": "R6700v3",
    "versions": [
      {
        "version": "1.0.4.120_10.0.91",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-520/
kb	www.kb.netgear.com/000064721/Security-Advisory-for-Multiple-Vulnerabilities-on-Multiple-Products-PSV-2021-0324

21 Nov 2024 06:56Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.8

CVSS 35

EPSS0.0015

SSVC

CWE-295