PT-2022-16777 · NetGear · Netgear Rax80+2

Doudoudedi · Published 2022-03-18 · Updated 2022-03-25 · CVE-2022-24655

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear EX6100v1 version 201.0.2.28 Netgear CAX80 version 2.1.2.6 Netgear DC112A version 1.0.0.62

Description A stack overflow vulnerability exists in the upnpd service, which may lead to the execution of arbitrary code without authentication.

Recommendations For Netgear EX6100v1 version 201.0.2.28, update to a version that fixes the upnpd service vulnerability. For Netgear CAX80 version 2.1.2.6, update to a version that fixes the upnpd service vulnerability. For Netgear DC112A version 1.0.0.62, update to a version that fixes the upnpd service vulnerability. As a temporary workaround, consider disabling the upnpd service until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-24655

Affected Products

Netgear Rax80

Netgear Dc112A

Netgear Ex6100V1

References · 6

• 🔥 https://github.com/doudoudedi/Netgear_product_stack_overflow/blob/main/NETGEAR%20EX%20series%20upnpd%20stack_overflow.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-24655 · Vendor Advisory
• https://kb.netgear.com/000064615/Security-Advisory-for-Pre-Authentication-Command-Injection-on-EX6100v1-and-Pre-Authentication-Stack-Overflow-on-Multiple-Products-PSV-2021-0282-PSV-2021-0288 · Vendor Advisory
• https://netgear.com/about/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24655 · Security Note
• https://t.me/cibsecurity/39196 · Telegram Post