Improper Authentication in NETGEAR products - CVE-2022-27643

Vulnerability identifier: #VU61592

CSH Severity: Low

CVSS v4: 5.2 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-27643

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to bypass authentication process.

The vulnerability exists due to an error in when processing authentication requests. An attacker with physical access can bypass authentication process and gain unauthorized access to the application.

R7100LG
D6220
D6400
WNDR3400v3
R6400
R8500
R6400v2
R7000
WNR3500Lv2
XR300
R6900P
R7000P
RS400
D7000v2
R6700v3

Install updates from vendor's website.

R7100LG - update to 1.0.0.76
D6220 - update to 1.0.0.80
D7000v2 - update to 1.0.0.80
D6400 - update to 1.0.0.114
WNDR3400v3 - update to 1.0.1.44
R6400 - update to 1.0.1.78
R8500 - update to 1.0.2.158
R6400v2 - update to 1.0.4.126
R6700v3 - update to 1.0.4.126
R7000 - update to 1.0.11.134
WNR3500Lv2 - update to 1.2.0.72
XR300 - update to 1.2.0.72
R6900P - update to 1.3.3.148
R7000P - update to 1.3.3.148
RS400 - update to 1.5.1.86

• https://kb.netgear.com/000064720/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0323

• Multiple vulnerabilities in NETGEAR Products