high7.8
CVE-2022-48176
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authe…
Impact
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | R7000p Firmware | before 1.3.3.154 |
| Netgear | R6900p Firmware | before 1.3.3.154 |
| Netgear | R7960p Firmware | before 1.4.4.94 |
| Netgear | R8000p Firmware | before 1.4.4.94 |
| Netgear | Mr60 Firmware | before 1.1.7.132 |
| Netgear | Ms60 Firmware | before 1.1.7.132 |
Weakness classification
References
- NVD record
- CVE.org record
- https://hdwsec.fr/blog/20221109-netgear/
- https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146
- https://www.netgear.com/about/security/
- https://hdwsec.fr/blog/20221109-netgear/
- https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146
- https://www.netgear.com/about/security/