PT-2022-27868 · NetGear · Netgear Xwn5001 Powerline 500 Wifi Access Point

Published 2022-12-20 · Updated 2022-12-29 · CVE-2022-46424

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear XWN5001 Powerline 500 WiFi Access Point versions v0.4.1.1 and earlier

Description An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a Man-in-the-Middle (MITM) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS).

Recommendations For versions v0.4.1.1 and earlier, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the firmware update process to minimize the risk of exploitation. Avoid using unsecured networks when uploading firmware images until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-46424

Affected Products

Netgear Xwn5001 Powerline 500 Wifi Access Point

References · 7

• 🔥 https://hackmd.io/@slASVrz_SrW7NQCsunofeA/B1rKQuzDj · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-46424 · Security Note
• https://netgear.com/about/security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-46424 · Vendor Advisory
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj · Note
• https://t.me/cibsecurity/54991 · Telegram Post
• https://t.me/cvenotify/40264 · Telegram Post