CVE-2022-27643

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the...

CVE-2022-27643

CVE-2022-27643 affects NETGEAR R6700v3 routers; a pre-auth buffer overflow in upnpd when parsing the SOAPAction header allows network-adjacent attackers to execute code with root privileges. Investigations reference ZDI-CAN-15692 and multiple security trackers noting a SOAP handling flaw. The con...