PT-2022-5775 · NetGear · Netgear Rax30 Ax2400

Kevin Denis · Published 2022-12-01 · Updated 2023-08-08 · CVE-2022-4390

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR RAX30 AX2400 series of routers versions prior to 1.0.9.90

Description A network misconfiguration is present in the affected devices, where IPv6 is enabled for the WAN interface by default. However, the firewall restrictions in place for IPv4 traffic are not applied to the WAN interface for IPv6. This allows arbitrary access to services running on the device that may be listening via IPv6, such as the SSH and Telnet servers on ports 22 and 23. The misconfiguration could allow an attacker to interact with services intended only for local network clients.

Recommendations For versions prior to 1.0.9.90, update to version 1.0.9.90 or later to resolve the issue. As a temporary workaround, consider disabling the SSH and Telnet servers until a patch is available. Restrict access to the WAN interface for IPv6 traffic to minimize the risk of exploitation.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-264

CWE-668

Related Identifiers

BDU:2022-07175

CVE-2022-4390

Affected Products

Netgear Rax30 Ax2400

References · 8

• 🔥 https://synacktiv.com/en/publications/cool-vulns-dont-live-long-netgear-and-pwn2own.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4390 · Security Note
• https://bdu.fstec.ru/vul/2022-07175 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4390 · Vendor Advisory
• https://vuldb.com/ru/?id.215242 · Note
• https://t.me/cibsecurity/54245 · Telegram Post
• https://tenable.com/security/research/tra-2022-36 · Note
• https://tenable.com/security/research/tra-2022-36%2C · Note