Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/20 12:00 a.m.•6 views

CVE-2022-46424: Undefined Security Weakness

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or...

8.1CVSS6.4AI score0.00876EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/20 12:00 a.m.•79 views

CVE-2022-46424

Affected product: Netgear XWN5001 Powerline 500 WiFi Access Point. Vulnerability: exploitable firmware modification allowing a MITM attacker to modify a user-uploaded firmware image and bypass CRC checks, enabling arbitrary code execution or Denial of Service. Root cause/condition: vulnerable fir...

8.1CVSS8.3AI score0.00876EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder