CVE-2022-27641
Netgear R6700v3 NetUSB Integer Overflow Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15806.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the NetUSB module. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-03-22 CVE Reserved
- 2022-03-29 CVE Published
- 2024-08-03 CVE Updated
- 2024-09-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-22-544 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | D7800 Firmware Search vendor "Netgear" for product "D7800 Firmware" | < 1.0.1.68 Search vendor "Netgear" for product "D7800 Firmware" and version " < 1.0.1.68" | - |
Affected
| in | Netgear Search vendor "Netgear" | D7800 Search vendor "Netgear" for product "D7800" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6200 Firmware Search vendor "Netgear" for product "Ex6200 Firmware" | < 1.0.1.90 Search vendor "Netgear" for product "Ex6200 Firmware" and version " < 1.0.1.90" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6200 Search vendor "Netgear" for product "Ex6200" | v2 Search vendor "Netgear" for product "Ex6200" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex8000 Firmware Search vendor "Netgear" for product "Ex8000 Firmware" | < 1.0.1.240 Search vendor "Netgear" for product "Ex8000 Firmware" and version " < 1.0.1.240" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex8000 Search vendor "Netgear" for product "Ex8000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6220 Firmware Search vendor "Netgear" for product "R6220 Firmware" | < 1.1.0.112 Search vendor "Netgear" for product "R6220 Firmware" and version " < 1.1.0.112" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6220 Search vendor "Netgear" for product "R6220" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6230 Firmware Search vendor "Netgear" for product "R6230 Firmware" | < 1.1.0.112 Search vendor "Netgear" for product "R6230 Firmware" and version " < 1.1.0.112" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6230 Search vendor "Netgear" for product "R6230" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R6400 Firmware Search vendor "Netgear" for product "R6400 Firmware" | < 1.0.4.122 Search vendor "Netgear" for product "R6400 Firmware" and version " < 1.0.4.122" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6400 Search vendor "Netgear" for product "R6400" | v2 Search vendor "Netgear" for product "R6400" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | R6700 Firmware Search vendor "Netgear" for product "R6700 Firmware" | < 1.0.4.122 Search vendor "Netgear" for product "R6700 Firmware" and version " < 1.0.4.122" | - |
Affected
| in | Netgear Search vendor "Netgear" | R6700 Search vendor "Netgear" for product "R6700" | v3 Search vendor "Netgear" for product "R6700" and version "v3" | - |
Safe
|
| Netgear Search vendor "Netgear" | R7000 Firmware Search vendor "Netgear" for product "R7000 Firmware" | < 1.0.11.130 Search vendor "Netgear" for product "R7000 Firmware" and version " < 1.0.11.130" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7000 Search vendor "Netgear" for product "R7000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | R7800 Firmware Search vendor "Netgear" for product "R7800 Firmware" | < 1.0.2.90 Search vendor "Netgear" for product "R7800 Firmware" and version " < 1.0.2.90" | - |
Affected
| in | Netgear Search vendor "Netgear" | R7800 Search vendor "Netgear" for product "R7800" | - | - |
Safe
|