CVE-2022-27643

🗓️ 29 Mar 2023 19:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 18 Views

NETGEAR R6700v3 1.0.4.120_10.0.91 router SOAP request processing vulnerability allows unauthorized code execution

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500v2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2, NETGEAR R7100LG, and NETGEAR DC112A lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.	4 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-27643	29 Mar 202322:16	–	circl
CNNVD	NETGEAR R6700v3 授权问题漏洞	23 Mar 202200:00	–	cnnvd
CNVD	NETGEAR R6700v3 Authorization Issues Vulnerability	25 Mar 202200:00	–	cnvd
CVE	CVE-2022-27643	29 Mar 202300:00	–	cve
Cvelist	CVE-2022-27643	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-32144	3 Oct 202520:07	–	euvd
OSV	CVE-2022-27643	29 Mar 202319:15	–	osv
Prion	Design/Logic Flaw	29 Mar 202319:15	–	prion
Positive Technologies	PT-2021-6474 · NetGear · Netgear R6400V2 +14	3 Dec 202100:00	–	ptsecurity

NVD

Node

netgear r6400_firmwareRange<1.0.1.78

AND

netgear r6400Match-

Node

netgear r6400_firmwareRange<1.0.4.126

AND

netgear r6400Matchv2

Node

netgear r6700_firmwareRange<1.0.4.126

AND

netgear r6700Matchv3

Node

netgear r6900p_firmwareRange<1.3.3.148

AND

netgear r6900pMatch-

Node

netgear r7000_firmwareRange<1.0.11.134

AND

netgear r7000Match-

Node

netgear r7000p_firmwareRange<1.3.3.148

AND

netgear r7000pMatch-

Node

netgear r7850_firmwareRange<1.0.5.84

AND

netgear r7850Match-

Node

netgear r7900p_firmwareRange<1.4.3.88

AND

netgear r7900pMatch-

Node

netgear r7960p_firmwareRange<1.4.3.88

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.84

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.3.88

AND

netgear r8000pMatch-

Node

netgear r8500_firmwareRange<1.0.2.158

AND

netgear r8500Match-

Node

netgear rax200_firmwareRange<1.0.6.138

AND

netgear rax200Match-

Node

netgear rax75_firmwareRange<1.0.6.138

AND

netgear rax75Match-

Node

netgear rax80_firmwareRange<1.0.6.138

AND

netgear rax80Match-

Node

netgear rs400_firmwareRange<1.5.1.86

AND

netgear rs400Match-

Node

netgear r7100lg_firmwareRange<1.0.0.76

AND

netgear r7100lgMatch-

Node

netgear wndr3400_firmwareRange<1.0.1.44

AND

netgear wndr3400Matchv3

Node

netgear wnr3500l_firmwareRange<1.2.0.72

AND

netgear wnr3500lMatchv2

Node

netgear xr300_firmwareRange<1.0.3.72

AND

netgear xr300Match-

Node

netgear dc112a_firmwareRange<1.0.0.64

AND

netgear dc112aMatch-

Node

netgear d6220_firmwareRange<1.0.0.80

AND

netgear d6220Match-

Node

netgear d6400_firmwareRange<1.0.0.114

AND

netgear d6400Match-

Node

netgear ex3700_firmwareRange<1.0.0.96

AND

netgear ex3700Match-

Node

netgear ex3800_firmwareRange<1.0.0.96

AND

netgear ex3800Match-

Node

netgear ex6120_firmwareRange<1.0.0.68

AND

netgear ex6120Match-

Node

netgear ex6130_firmwareRange<1.0.0.48

AND

netgear ex6130Match-

Node

netgear d7000v2_firmwareRange<1.0.0.80

AND

netgear d7000v2Match-

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-519/
kb	www.kb.netgear.com/000064720/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0323

21 Nov 2024 06:56Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 38.8

EPSS0.00836

vulnerability netgear soap request unauthorized code execution zdi-can-15692