CVE-2022-47209

2022-12-1600:00:00

tenable

www.cve.org

backdoor

support user

default password

technical support

inaccessible change

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

40.4%

JSON

A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "NETGEAR Nighthawk WiFi6 Router",
    "versions": [
      {
        "version": "NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90",
        "status": "affected"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2022-37