PT-2023-2117 · NetGear · Netgear Nighthawk Wifi6 Router

Evan Grant + 1 · Publicado 2023-03-06 · Atualizado 2025-02-28 · CVE-2023-27850

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk WiFi6 Router versions prior to V1.0.10.94

Description The issue is related to the file sharing mechanism in the NETGEAR Nighthawk WiFi6 Router, which allows users with access to this feature to access arbitrary files on the device. This is due to insufficient access control in the file sharing component of the router's software. Exploitation of this issue may allow a remote attacker to gain access to arbitrary files.

Recommendations For versions prior to V1.0.10.94, update to version V1.0.10.94 or later to resolve the issue. As a temporary workaround, consider restricting access to the file sharing feature until a patch is applied.

Correção

Improper Access Control

Link Following

Enumeração de Fraquezas

CWE-284

CWE-59

Identificadores relacionados

BDU:2023-01854

CVE-2023-27850

Produtos afetados

Netgear Nighthawk Wifi6 Router

Referências · 6

• https://t.me/cvenotify/112831 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27850 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-27850 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-01854 · Nota de Segurança
• https://t.me/cibsecurity/59804 · Publicação no Telegram
• https://tenable.com/security/research/tra-2023-9 · Nota