Lucene search

K
zdiXin'an Zhou, Xiaochen Zou, Zhiyun Qian (from the team NullRiver)ZDI-22-522
HistoryMar 23, 2022 - 12:00 a.m.

(Pwn2Own) NETGEAR R6700v3 readycloud_control.cgi Authentication Bypass Vulnerability

2022-03-2300:00:00
Xin'an Zhou, Xiaochen Zou, Zhiyun Qian (from the team NullRiver)
www.zerodayinitiative.com
30
netgear r6700v3
readycloud_control.cgi
authentication bypass
code execution

EPSS

0.003

Percentile

68.6%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root.

EPSS

0.003

Percentile

68.6%

Related for ZDI-22-522