Lucene search

[email protected]NVD:CVE-2022-27642

HistoryMar 29, 2023 - 7:15 p.m.

CVE-2022-27642

2023-03-2919:15:08

CWE-863

[email protected]

web.nvd.nist.gov

vulnerability

netgear

unauthenticated access

code execution

httpd service

string matching logic

zdi-can-15854

cve-2022-27642

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

32.0%

JSON

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.

Affected configurations

Nvd

Node

netgearcax80Match-

AND

netgearcax80_firmwareRange<2.1.3.7

Node

netgearlax20Match-

AND

netgearlax20_firmwareRange<1.1.6.34

Node

netgearmr60Match-

AND

netgearmr60_firmwareRange<1.1.6.124

Node

netgearmr80Match-

AND

netgearmr80_firmwareRange<1.1.6.14

Node

netgearms60Match-

AND

netgearms60_firmwareRange<1.1.6.124

Node

netgearms80Match-

AND

netgearms80_firmwareRange<1.1.6.14

Node

netgearr6400Match-

AND

netgearr6400_firmwareRange<1.0.1.78

Node

netgearr6400Matchv2

AND

netgearr6400_firmwareRange<1.0.4.126

Node

netgearr6700_firmwareRange<1.0.4.126

AND

netgearr6700Matchv3

Node

netgearr6900p_firmwareRange<1.3.3.148

AND

netgearr6900pMatch-

Node

netgearr7000_firmwareRange<1.0.11.134

AND

netgearr7000Match-

Node

netgearr7000p_firmwareRange<1.3.3.148

AND

netgearr7000pMatch-

Node

netgearr7850_firmwareRange<1.0.5.84

AND

netgearr7850Match-

Node

netgearr7900p_firmwareRange<1.4.3.88

AND

netgearr7900pMatch-

Node

netgearr7960p_firmwareRange<1.4.3.88

AND

netgearr7960pMatch-

Node

netgearr8000_firmwareRange<1.0.4.84

AND

netgearr8000Match-

Node

netgearr8000p_firmwareRange<1.4.3.88

AND

netgearr8000pMatch-

Node

netgearr8500_firmwareRange<1.0.2.158

AND

netgearr8500Match-

Node

netgearrax15_firmwareRange<1.0.10.110

AND

netgearrax15Match-

Node

netgearrax20_firmwareRange<1.0.10.110

AND

netgearrax20Match-

Node

netgearrax200_firmwareRange<1.0.6.138

AND

netgearrax200Match-

Node

netgearrax35_firmwareRange<1.0.10.110

AND

netgearrax35Matchv2

Node

netgearrax38_firmwareRange<1.0.10.110

AND

netgearrax38Matchv2

Node

netgearrax40_firmwareRange<1.0.10.110

AND

netgearrax40Matchv2

Node

netgearrax42_firmwareRange<1.0.10.110

AND

netgearrax42Match-

Node

netgearrax43_firmwareRange<1.0.10.110

AND

netgearrax43Match-

Node

netgearrax45_firmwareRange<1.0.10.110

AND

netgearrax45Match-

Node

netgearrax48Match-

AND

netgearrax48_firmwareRange<1.0.10.110

Node

netgearrax50_firmwareRange<1.0.10.110

AND

netgearrax50Match-

Node

netgearrax50s_firmwareRange<1.0.10.110

AND

netgearrax50sMatch-

Node

netgearrax75_firmwareRange<1.0.6.138

AND

netgearrax75Match-

Node

netgearrax80_firmwareRange<1.0.6.138

AND

netgearrax80Match-

Node

netgearrs400_firmwareRange<1.5.1.86

AND

netgearrs400Match-

Node

netgearr7100lg_firmwareRange<1.0.0.76

AND

netgearr7100lgMatch-

VendorProductVersionCPE
netgearcax80-cpe:2.3:h:netgear:cax80:-:*:*:*:*:*:*:*
netgearcax80_firmware*cpe:2.3:o:netgear:cax80_firmware:*:*:*:*:*:*:*:*
netgearlax20-cpe:2.3:h:netgear:lax20:-:*:*:*:*:*:*:*
netgearlax20_firmware*cpe:2.3:o:netgear:lax20_firmware:*:*:*:*:*:*:*:*
netgearmr60-cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
netgearmr60_firmware*cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
netgearmr80-cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*
netgearmr80_firmware*cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
netgearms60-cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
netgearms60_firmware*cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	cax80	-	cpe:2.3:h:netgear:cax80:-:::::::*
netgear	cax80_firmware	*	cpe:2.3:o:netgear:cax80_firmware::::::::
netgear	lax20	-	cpe:2.3:h:netgear:lax20:-:::::::*
netgear	lax20_firmware	*	cpe:2.3:o:netgear:lax20_firmware::::::::
netgear	mr60	-	cpe:2.3:h:netgear:mr60:-:::::::*
netgear	mr60_firmware	*	cpe:2.3:o:netgear:mr60_firmware::::::::
netgear	mr80	-	cpe:2.3:h:netgear:mr80:-:::::::*
netgear	mr80_firmware	*	cpe:2.3:o:netgear:mr80_firmware::::::::
netgear	ms60	-	cpe:2.3:h:netgear:ms60:-:::::::*
netgear	ms60_firmware	*	cpe:2.3:o:netgear:ms60_firmware::::::::

Rows per page:

1-10 of 671

References

kb.netgear.com/000064723/Security-Advisory-for-Multiple-Vulnerabilities-on-Multiple-Products-PSV-2021-0327

www.zerodayinitiative.com/advisories/ZDI-22-518/

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

32.0%

JSON

Related for NVD:CVE-2022-27642

zdi1 prion1 cve1 cvelist1