PT-2023-1856 · NetGear · Netgear Nighthawk Wifi6 Router

Evan Grant + 1 · Publicado 2023-03-06 · Atualizado 2025-02-27 · CVE-2023-27851

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk WiFi 6 Router versions prior to V1.0.10.94

Description The issue is related to the file sharing mechanism in the router's software, which incorrectly handles permissions. This can allow a remote attacker to execute arbitrary code on the device. The exploitation of this issue may enable unauthorized access and control.

Recommendations For versions prior to V1.0.10.94, update the firmware to version V1.0.10.94 or later to resolve the issue. As a temporary workaround, consider restricting upload permissions for users to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2023-01455

CVE-2023-27851

Produtos afetados

Netgear Nighthawk Wifi6 Router

Referências · 6

• https://bdu.fstec.ru/vul/2023-01455 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-27851 · Aviso do Fabricante
• https://t.me/cvenotify/112710 · Publicação no Telegram
• https://t.me/cibsecurity/59807 · Publicação no Telegram
• https://tenable.com/security/research/tra-2023-9 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-27851 · Nota de Segurança