CVE-2022-46424

Katalog CVE

CVSS 8.1 · High EPSS 0,88%

Kerentanan pada netgear xwn5001 firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.

Rincian

Terbit di NVD

20 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 57,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.netgear.com/about/security/ advisory vendor
• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj