8.8

CVE-2022-27646

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the circled daemon. A crafted circleinfo.txt file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15879.

Data is provided by the National Vulnerability Database (NVD)
Netgear ≫ R6400 Firmware Version < 1.0.4.126
   Netgear ≫ R6400 Versionv2
Netgear ≫ R6700 Firmware Version < 1.0.4.126
   Netgear ≫ R6700 Versionv3
Netgear ≫ R6900p Firmware Version < 1.3.3.148
   Netgear ≫ R6900p Version-
Netgear ≫ R7000 Firmware Version < 1.0.11.134
   Netgear ≫ R7000 Version-
Netgear ≫ R7000p Firmware Version < 1.3.3.148
   Netgear ≫ R7000p Version-
Netgear ≫ R7850 Firmware Version < 1.0.5.84
   Netgear ≫ R7850 Version-
Netgear ≫ R7960p Firmware Version < 1.4.3.88
   Netgear ≫ R7960p Version-
Netgear ≫ R8000 Firmware Version < 1.0.4.84
   Netgear ≫ R8000 Version-
Netgear ≫ R8000p Firmware Version < 1.4.3.88
   Netgear ≫ R8000p Version-
Netgear ≫ Rax200 Firmware Version < 1.0.6.138
   Netgear ≫ Rax200 Version-
Netgear ≫ Rax75 Firmware Version < 1.0.6.138
   Netgear ≫ Rax75 Version-
Netgear ≫ Rax80 Firmware Version < 1.0.6.138
   Netgear ≫ Rax80 Version-
Netgear ≫ Rs400 Firmware Version < 1.5.1.86
   Netgear ≫ Rs400 Version-
Netgear ≫ Cbr40 Firmware Version < 2.5.0.28
   Netgear ≫ Cbr40 Version-
Netgear ≫ Lbr1020 Firmware Version < 2.7.4.2
   Netgear ≫ Lbr1020 Version-
Netgear ≫ Lbr20 Firmware Version < 2.7.4.2
   Netgear ≫ Lbr20 Version-
Netgear ≫ Rbr10 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr10 Version-
Netgear ≫ Rbr20 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr20 Version-
Netgear ≫ Rbr40 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr40 Version-
Netgear ≫ Rbr50 Firmware Version < 2.7.4.24
   Netgear ≫ Rbr50 Version-
Netgear ≫ Rbs10 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs10 Version-
Netgear ≫ Rbs20 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs20 Version-
Netgear ≫ Rbs40 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs40 Version-
Netgear ≫ Rbs50 Firmware Version < 2.7.4.24
   Netgear ≫ Rbs50 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.48% 0.791
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
zdi-disclosures@trendmicro.com 8 2.1 5.9
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).