CVE-2022-40620

Several NETGEAR routers and Orbi WiFi Systems are vulnerable due to improper TLS certificate validation within the FunJSQ third-party module. During the auto-update mechanism, the module fails to properly verify certificates when downloading update packages. A suitably positioned attacker on the ...