PT-2022-4966 · NetGear · Netgear Wpn824Ext Wifi Range Extender

Published 2022-09-20 · Updated 2022-09-22 · CVE-2022-38956

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Netgear WPN824EXT WiFi Range Extender versions 1.1.1 through 1.1.9 and earlier

Description The issue is related to a lack of integrity check in the firmware of the Netgear WPN824EXT WiFi Range Extender. An attacker can exploit this by conducting a man-in-the-middle (MITM) attack to replace the user-uploaded firmware image with an older version. This allows a remote attacker to downgrade the firmware version.

Recommendations For versions 1.1.1 through 1.1.9 and earlier, consider disabling the firmware update feature until a patch is available to prevent exploitation. As a temporary workaround, restrict access to the device to minimize the risk of a MITM attack. Avoid using the device until a fixed version of the firmware is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-354

Related Identifiers

BDU:2022-06160

CVE-2022-38956

Affected Products

Netgear Wpn824Ext Wifi Range Extender

References · 8

• 🔥 https://hackmd.io/@eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s · Exploit
• https://osv.dev/vulnerability/CVE-2022-38956 · Vendor Advisory
• https://netgear.com/about/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38956 · Security Note
• https://bdu.fstec.ru/vul/2022-06160 · Security Note
• https://t.me/cibsecurity/50156 · Telegram Post
• https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s · Note
• https://github.com/advisories/GHSA-qrm9-295f-xg65 · Note