CVE-2022-27645

🗓️ 29 Mar 2023 19:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

Vulnerability in NETGEAR R6700v3 routers allows unauthenticated access to execute code

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the readycloud_control.cgi file in the embedded software of NETGEAR routers such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R7000, NETGEAR R8500, NETGEAR RAX15, NETGEAR RAX20, NETGEAR RAX35v2, NETGEAR RAX38v2, NETGEAR RAX40v2, NETGEAR RAX42, NETGEAR RAX43, NETGEAR RAX45, NETGEAR RAX48, NETGEAR RAX50, NETGEAR RAX50S, and NETGEAR LAX20 allows a hacker to bypass authentication.	4 Apr 202200:00	–	bdu_fstec
CNNVD	NETGEAR R6700v3 访问控制错误漏洞	23 Mar 202200:00	–	cnnvd
CVE	CVE-2022-27645	29 Mar 202300:00	–	cve
Cvelist	CVE-2022-27645	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-32146	3 Oct 202520:07	–	euvd
OSV	CVE-2022-27645	29 Mar 202319:15	–	osv
Prion	Authentication flaw	29 Mar 202319:15	–	prion
Positive Technologies	PT-2021-6477 · NetGear · Netgear Rax50 +13	1 Dec 202100:00	–	ptsecurity
RedhatCVE	CVE-2022-27645	7 Jan 202609:10	–	redhatcve
Vulnrichment	CVE-2022-27645	29 Mar 202300:00	–	vulnrichment

NVD

Node

netgear lax20_firmwareRange<1.1.6.34

AND

netgear lax20Match-

Node

netgear r6400_firmwareRange<1.0.4.126

AND

netgear r6400Matchv2

Node

netgear r6700_firmwareRange<1.0.4.126

AND

netgear r6700Matchv3

Node

netgear r7000_firmwareRange<1.0.11.134

AND

netgear r7000Match-

Node

netgear r7850_firmwareRange<1.0.5.84

AND

netgear r7850Match-

Node

netgear r7900p_firmwareRange<1.4.3.88

AND

netgear r7900pMatch-

Node

netgear r7960p_firmwareRange<1.4.3.88

AND

netgear r7960pMatch-

Node

netgear r8000_firmwareRange<1.0.4.84

AND

netgear r8000Match-

Node

netgear r8000p_firmwareRange<1.4.3.88

AND

netgear r8000pMatch-

Node

netgear r8500_firmwareRange<1.0.2.158

AND

netgear r8500Match-

Node

netgear rax15_firmwareRange<1.0.10.110

AND

netgear rax15Match-

Node

netgear rax20_firmwareRange<1.0.10.110

AND

netgear rax20Match-

Node

netgear rax200_firmwareRange<1.0.6.138

AND

netgear rax200Match-

Node

netgear rax35_firmwareRange<1.0.10.110

AND

netgear rax35Matchv2

Node

netgear rax38_firmwareRange<1.0.10.110

AND

netgear rax38Matchv2

Node

netgear rax40_firmwareRange<1.0.10.110

AND

netgear rax40Matchv2

Node

netgear rax42_firmwareRange<1.0.10.110

AND

netgear rax42Match-

Node

netgear rax43_firmwareRange<1.0.10.110

AND

netgear rax43Match-

Node

netgear rax45_firmwareRange<1.0.10.110

AND

netgear rax45Match-

Node

netgear rax48_firmwareRange<1.0.10.110

AND

netgear rax48Match-

Node

netgear rax50_firmwareRange<1.0.10.110

AND

netgear rax50Match-

Node

netgear rax50s_firmwareRange<1.0.10.110

AND

netgear rax50sMatch-

Node

netgear rax75_firmwareRange<1.0.6.138

AND

netgear rax75Match-

Source	Link
kb	www.kb.netgear.com/000064722/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-and-Fixed-Wireless-Products-PSV-2021-0325
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-522/

21 Nov 2024 06:56Current

9High risk

Vulners AI Score9

CVSS 3.18.8

CVSS 38.8

EPSS0.01277

CWE-697 CWE-306

cve-2022-27645 netgear r6700v3 unauthenticated access execute code readycloud_control.cgi zdi-can-15762