8

CVE-2022-27647

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the name or email field provided to libreadycloud.so. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15874.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Cax80 Firmware Version < 2.1.3.7
   Netgear ≫ Cax80 Version -
Netgear ≫ Lax20 Firmware Version < 1.1.6.34
   Netgear ≫ Lax20 Version -
Netgear ≫ Mr60 Firmware Version < 1.1.6.124
   Netgear ≫ Mr60 Version -
Netgear ≫ Mr80 Firmware Version < 1.1.6.14
   Netgear ≫ Mr80 Version -
Netgear ≫ Ms60 Firmware Version < 1.1.6.124
   Netgear ≫ Ms60 Version -
Netgear ≫ Ms80 Firmware Version < 1.1.6.14
   Netgear ≫ Ms80 Version -
Netgear ≫ R6400 Firmware Version < 1.0.1.78
   Netgear ≫ R6400 Version -
Netgear ≫ R6400 Firmware Version < 1.0.4.126
   Netgear ≫ R6400 Version v2
Netgear ≫ R6700 Firmware Version < 1.0.4.126
   Netgear ≫ R6700 Version v3
Netgear ≫ R6900p Firmware Version < 1.3.3.148
   Netgear ≫ R6900p Version -
Netgear ≫ R7000 Firmware Version < 1.0.11.134
   Netgear ≫ R7000 Version -
Netgear ≫ R7000p Firmware Version < 1.3.3.148
   Netgear ≫ R7000p Version -
Netgear ≫ R7850 Firmware Version < 1.0.5.84
   Netgear ≫ R7850 Version -
Netgear ≫ R7900p Firmware Version < 1.4.3.88
   Netgear ≫ R7900p Version -
Netgear ≫ R7960p Firmware Version < 1.4.3.88
   Netgear ≫ R7960p Version -
Netgear ≫ R8000 Firmware Version < 1.0.4.84
   Netgear ≫ R8000 Version -
Netgear ≫ R8000p Firmware Version < 1.4.3.88
   Netgear ≫ R8000p Version -
Netgear ≫ R8500 Firmware Version < 1.0.2.158
   Netgear ≫ R8500 Version -
Netgear ≫ Rax15 Firmware Version < 1.0.10.110
   Netgear ≫ Rax15 Version -
Netgear ≫ Rax20 Firmware Version < 1.0.10.110
   Netgear ≫ Rax20 Version -
Netgear ≫ Rax200 Firmware Version < 1.0.6.138
   Netgear ≫ Rax200 Version -
Netgear ≫ Rax35 Firmware Version < 1.0.10.110
   Netgear ≫ Rax35 Version v2
Netgear ≫ Rax38 Firmware Version < 1.0.10.110
   Netgear ≫ Rax38 Version v2
Netgear ≫ Rax40 Firmware Version < 1.0.10.110
   Netgear ≫ Rax40 Version v2
Netgear ≫ Rax42 Firmware Version < 1.0.10.110
   Netgear ≫ Rax42 Version -
Netgear ≫ Rax43 Firmware Version < 1.0.10.110
   Netgear ≫ Rax43 Version -
Netgear ≫ Rax45 Firmware Version < 1.0.10.110
   Netgear ≫ Rax45 Version -
Netgear ≫ Rax48 Firmware Version < 1.0.10.110
   Netgear ≫ Rax48 Version -
Netgear ≫ Rax50 Firmware Version < 1.0.10.110
   Netgear ≫ Rax50 Version -
Netgear ≫ Rax50s Firmware Version < 1.0.10.110
   Netgear ≫ Rax50s Version -
Netgear ≫ Rax75 Firmware Version < 1.0.6.138
   Netgear ≫ Rax75 Version -
Netgear ≫ Rax80 Firmware Version < 1.0.6.138
   Netgear ≫ Rax80 Version -
Netgear ≫ Rs400 Firmware Version < 1.5.1.86
   Netgear ≫ Rs400 Version -
Netgear ≫ R7100lg Firmware Version < 1.0.0.76
   Netgear ≫ R7100lg Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.47% 0.703
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8 2.1 5.9
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Trend Micro 8 2.1 5.9
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://kb.netgear.com/000064723/Security-Advisory-for-Multiple-Vulnerabilities-on-Multiple-Products-PSV-2021-0327
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-524/
Third Party Advisory
VDB Entry