PT-2022-20001 · NetGear · Netgear R6200 V2+1

Maybethetricker + 3 · Published 2022-09-07 · Updated 2024-02-14 · CVE-2022-30078

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR R6200 V2 versions through R6200v2-V1.0.3.12 10.1.11 NETGEAR R6300 V2 versions through R6300v2-V1.0.4.52 10.0.93

Description The issue allows remote authenticated attackers to execute arbitrary commands via shell metacharacters in the ipv6 fix.cgi parameters, specifically ipv6 wan ipaddr, ipv6 lan ipaddr, ipv6 wan length, or ipv6 lan length.

Recommendations For NETGEAR R6200 V2 versions through R6200v2-V1.0.3.12 10.1.11, update to a version later than R6200v2-V1.0.3.12 10.1.11 to resolve the issue. For NETGEAR R6300 V2 versions through R6300v2-V1.0.4.52 10.0.93, update to a version later than R6300v2-V1.0.4.52 10.0.93 to resolve the issue. As a temporary workaround, consider restricting access to the ipv6 fix.cgi endpoint until a patch is available. Avoid using the parameters ipv6 wan ipaddr, ipv6 lan ipaddr, ipv6 wan length, or ipv6 lan length in the affected endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-30078

Affected Products

Netgear R6200 V2

Netgear R6300V2

References · 6

• 🔥 https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30078/CVE-2022-30078.md · Exploit
• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30078 · Security Note
• http://r6200v2.com · Note
• https://t.me/pentestingnews/27777 · Telegram Post