8.8

CVE-2022-27646

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the circled daemon. A crafted circleinfo.txt file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15879.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ R6400 Firmware Version < 1.0.4.126
   Netgear ≫ R6400 Version v2
Netgear ≫ R6700 Firmware Version < 1.0.4.126
   Netgear ≫ R6700 Version v3
Netgear ≫ R6900p Firmware Version < 1.3.3.148
   Netgear ≫ R6900p Version -
Netgear ≫ R7000 Firmware Version < 1.0.11.134
   Netgear ≫ R7000 Version -
Netgear ≫ R7000p Firmware Version < 1.3.3.148
   Netgear ≫ R7000p Version -
Netgear ≫ R7850 Firmware Version < 1.0.5.84
   Netgear ≫ R7850 Version -
Netgear ≫ R7960p Firmware Version < 1.4.3.88
   Netgear ≫ R7960p Version -
Netgear ≫ R8000 Firmware Version < 1.0.4.84
   Netgear ≫ R8000 Version -
Netgear ≫ R8000p Firmware Version < 1.4.3.88
   Netgear ≫ R8000p Version -
Netgear ≫ Rax200 Firmware Version < 1.0.6.138
   Netgear ≫ Rax200 Version -
Netgear ≫ Rax75 Firmware Version < 1.0.6.138
   Netgear ≫ Rax75 Version -
Netgear ≫ Rax80 Firmware Version < 1.0.6.138
   Netgear ≫ Rax80 Version -
Netgear ≫ Rs400 Firmware Version < 1.5.1.86
   Netgear ≫ Rs400 Version -
Netgear ≫ Cbr40 Firmware Version < 2.5.0.28
   Netgear ≫ Cbr40 Version -
Netgear ≫ Lbr1020 Firmware Version < 2.7.4.2
   Netgear ≫ Lbr1020 Version -
Netgear ≫ Lbr20 Firmware Version < 2.7.4.2
   Netgear ≫ Lbr20 Version -
Netgear ≫ Rbr10 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr10 Version -
Netgear ≫ Rbr20 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr20 Version -
Netgear ≫ Rbr40 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr40 Version -
Netgear ≫ Rbr50 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr50 Version -
Netgear ≫ Rbs10 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs10 Version -
Netgear ≫ Rbs20 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs20 Version -
Netgear ≫ Rbs40 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs40 Version -
Netgear ≫ Rbs50 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs50 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.43% 0.696
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trend Micro 8 2.1 5.9
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://kb.netgear.com/000064721/Security-Advisory-for-Multiple-Vulnerabilities-on-Multiple-Products-PSV-2021-0324
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-523/
Third Party Advisory
VDB Entry