Lucene search

MitreCVE-2022-38955

HistorySep 20, 2022 - 6:15 p.m.

CVE-2022-38955

2022-09-2018:15:10

CWE-354

mitre

web.nvd.nist.gov

netgear

wpn824ext

firmware

vulnerability

mitm

crc

backdoor

dos

nvd

cve-2022-38955

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

Affected configurations

Nvd

Node

netgearwpn824ext_firmwareMatch1.1.1_1.1.9

AND

netgearwpn824extMatch-

VendorProductVersionCPE
netgearwpn824ext_firmware1.1.1_1.1.9cpe:2.3:o:netgear:wpn824ext_firmware:1.1.1_1.1.9:*:*:*:*:*:*:*
netgearwpn824ext-cpe:2.3:h:netgear:wpn824ext:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	wpn824ext_firmware	1.1.1_1.1.9	cpe:2.3:o:netgear:wpn824ext_firmware:1.1.1_1.1.9:::::::*
netgear	wpn824ext	-	cpe:2.3:h:netgear:wpn824ext:-:::::::*

References

hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s

www.netgear.com/about/security/

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

Related for CVE-2022-38955