8.8

CVE-2022-27645

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Lax20 Firmware Version < 1.1.6.34
   Netgear ≫ Lax20 Version -
Netgear ≫ R6400 Firmware Version < 1.0.4.126
   Netgear ≫ R6400 Version v2
Netgear ≫ R6700 Firmware Version < 1.0.4.126
   Netgear ≫ R6700 Version v3
Netgear ≫ R7000 Firmware Version < 1.0.11.134
   Netgear ≫ R7000 Version -
Netgear ≫ R7850 Firmware Version < 1.0.5.84
   Netgear ≫ R7850 Version -
Netgear ≫ R7900p Firmware Version < 1.4.3.88
   Netgear ≫ R7900p Version -
Netgear ≫ R7960p Firmware Version < 1.4.3.88
   Netgear ≫ R7960p Version -
Netgear ≫ R8000 Firmware Version < 1.0.4.84
   Netgear ≫ R8000 Version -
Netgear ≫ R8000p Firmware Version < 1.4.3.88
   Netgear ≫ R8000p Version -
Netgear ≫ R8500 Firmware Version < 1.0.2.158
   Netgear ≫ R8500 Version -
Netgear ≫ Rax15 Firmware Version < 1.0.10.110
   Netgear ≫ Rax15 Version -
Netgear ≫ Rax20 Firmware Version < 1.0.10.110
   Netgear ≫ Rax20 Version -
Netgear ≫ Rax200 Firmware Version < 1.0.6.138
   Netgear ≫ Rax200 Version -
Netgear ≫ Rax35 Firmware Version < 1.0.10.110
   Netgear ≫ Rax35 Version v2
Netgear ≫ Rax38 Firmware Version < 1.0.10.110
   Netgear ≫ Rax38 Version v2
Netgear ≫ Rax40 Firmware Version < 1.0.10.110
   Netgear ≫ Rax40 Version v2
Netgear ≫ Rax42 Firmware Version < 1.0.10.110
   Netgear ≫ Rax42 Version -
Netgear ≫ Rax43 Firmware Version < 1.0.10.110
   Netgear ≫ Rax43 Version -
Netgear ≫ Rax45 Firmware Version < 1.0.10.110
   Netgear ≫ Rax45 Version -
Netgear ≫ Rax48 Firmware Version < 1.0.10.110
   Netgear ≫ Rax48 Version -
Netgear ≫ Rax50 Firmware Version < 1.0.10.110
   Netgear ≫ Rax50 Version -
Netgear ≫ Rax50s Firmware Version < 1.0.10.110
   Netgear ≫ Rax50s Version -
Netgear ≫ Rax75 Firmware Version < 1.0.6.138
   Netgear ≫ Rax75 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.29% 0.667
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trend Micro 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

CWE-697 Incorrect Comparison

The product compares two entities in a security-relevant context, but the comparison is incorrect.

https://kb.netgear.com/000064722/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-and-Fixed-Wireless-Products-PSV-2021-0325
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-522/
Third Party Advisory
VDB Entry