PT-2021-6475 · NetGear · Netgear R7000+6

0Xmitsurugi

+3

·

Published

2021-12-01

·

Updated

2023-04-05

·

CVE-2022-27644

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6400v2 (affected versions not specified) NETGEAR R6900P (affected versions not specified) NETGEAR R7000 (affected versions not specified) NETGEAR R7000P (affected versions not specified) NETGEAR RS400 (affected versions not specified) NETGEAR CBR40 (affected versions not specified)
Description This issue allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The specific flaw exists within the downloading of files via HTTPS, resulting from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other issues to execute arbitrary code in the context of root.
Recommendations For NETGEAR R6700v3 version 1.0.4.120 10.0.91, consider disabling the HTTPS file download feature until a patch is available. For NETGEAR R6400v2, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR RS400, and NETGEAR CBR40, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2022-01717
CVE-2022-27644
ZDI-22-520

Affected Products

Netgear Cbr40
Netgear R6400V2
Netgear R6700V3
Netgear R6900P
Netgear R7000
Netgear R7000P
Netgear Rs400