CVE-2022-27642: (Pwn2Own) NETGEAR R6700v3 httpd Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.
Other sources
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27642?
CVE-2022-27642 is classified as a critical vulnerability because it allows network-adjacent attackers to bypass authentication on affected NETGEAR routers.
How do I fix CVE-2022-27642?
To mitigate CVE-2022-27642, users should upgrade their NETGEAR R6700v3 firmware to the latest version that addresses this vulnerability.
Which devices are affected by CVE-2022-27642?
CVE-2022-27642 primarily affects NETGEAR R6700v3 routers running firmware version 1.0.4.120_10.0.91 and older.
Can CVE-2022-27642 be exploited remotely?
CVE-2022-27642 can be exploited by attackers who are on the same network segment as the affected routers.
Is authentication required to exploit CVE-2022-27642?
No, authentication is not required to exploit CVE-2022-27642, making it a significant security risk.