2 matches found
CVE-2022-46424: Undefined Security Weakness
An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...
8.1CVSS6.4AI score0.00876EPSS
SaveExploits0References1
CVE-2022-46424
Affected product: Netgear XWN5001 Powerline 500 WiFi Access Point. Vulnerability: exploitable firmware modification allowing a MITM attacker to modify a user-uploaded firmware image and bypass CRC checks, enabling arbitrary code execution or Denial of Service. Root cause/condition: vulnerable fir...
8.1CVSS8.3AI score0.00876EPSS
SaveExploits0References2Affected Software1
20