PT-2021-6481 · NetGear · Netgear Rax15+20

Bugscale Team · Published 2021-12-01 · Updated 2023-04-06 · CVE-2022-27647

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR R6400 version not specified NETGEAR R6400v2 version not specified NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6900P version not specified NETGEAR R7000 version not specified NETGEAR R7000P version not specified NETGEAR R8500 version not specified NETGEAR RAX15 version not specified NETGEAR RAX20 version not specified NETGEAR RAX35v2 version not specified NETGEAR RAX38v2 version not specified NETGEAR RAX40v2 version not specified NETGEAR RAX42 version not specified NETGEAR RAX43 version not specified NETGEAR RAX45 version not specified NETGEAR RAX48 version not specified NETGEAR RAX50 version not specified NETGEAR RAX50S version not specified NETGEAR RS400 version not specified NETGEAR R7100LG version not specified NETGEAR LAX20 version not specified NETGEAR CAX80 version not specified NETGEAR MR80 version not specified NETGEAR MS80 version not specified

Description The issue is related to insufficient input validation, allowing a remote attacker to execute arbitrary code. The specific flaw exists within the handling of the name or email field provided to libreadycloud.so, resulting from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

OS Command Injection

RCE

Weakness Enumeration

CWE-200

CWE-78

CWE-20

Related Identifiers

BDU:2022-01728

CVE-2022-27647

ZDI-22-524

Affected Products

Netgear Rax80

Netgear Rax20

Netgear Ms80

Netgear R6400

Netgear R6400V2

Netgear R6700V3

Netgear R6900P

Netgear R7000

Netgear R7000P

Netgear R7100Lg

Netgear R8500

Netgear Rax15

Netgear Rax35V2

Netgear Rax38V2

Netgear Rax40V2

Netgear Rax42

Netgear Rax43

Netgear Rax45

Netgear Rax48

Netgear Rax50

Netgear Rs400

References · 6

• https://kb.netgear.com/000064723/Security-Advisory-for-Multiple-Vulnerabilities-on-Multiple-Products-PSV-2021-0327 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-524 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27647 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27647 · Security Note
• https://bdu.fstec.ru/vul/2022-01728 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022032410 · Note