CVE-2022-27644

HIGH

NETGEAR Multiple Router Firmware - Improper Certificate Validation

Title source: llm
STIX 2.1

Description

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-15797.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0015
EPSS Percentile 35.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-295
Status published
Products (24)
netgear/cbr40_firmware < 2.5.0.28
netgear/lbr1020_firmware < 2.7.4.2
netgear/lbr20_firmware < 2.7.4.2
netgear/r6400_firmware < 1.0.4.126
netgear/r6700_firmware < 1.0.4.126
netgear/r6900p_firmware < 1.3.3.148
netgear/r7000_firmware < 1.0.11.134
netgear/r7000p_firmware < 1.3.3.148
netgear/r7850_firmware < 1.0.5.84
netgear/r7960p_firmware < 1.4.3.88
... and 14 more
Published Mar 29, 2023
Tracked Since Feb 18, 2026