Configuration in NETGEAR products - #VU77789

Vulnerability identifier: #VU77789

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
MK82
MR80
MS80
RBRE960
RBSE960
C7000v2
CBR750
MR70
MS70
RAX42
RAX43
RAX48
RAX45
RAX50
RAX50S
RAX38v2
RAX35v2
RAX40v2
RAXE500
RAXE450
R6700v3
RBK752
RBR750
RBS750
RBK852
RBR850
RBS850
RBK842
RBR840
RBS840
CAX80
MK62
MR60
MS60

Software vendor:
NETGEAR

The issue may allow a local attacker to bypass implemented security restrictions.

The issue exists due to the possibility to a security misconfiguration issue. A local attacker can gain access to sensitive information on the system.

Install updates from vendor's website.

• https://kb.netgear.com/000065713/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-WiFi-Systems-PSV-2022-0010