ZDI-CAN-15762: (Pwn2Own) NETGEAR R6700v3 readycloud_control.cgi Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloudcontrol.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-15762?
ZDI-CAN-15762 is considered a critical vulnerability due to its ability to bypass authentication on NETGEAR R6700v3 routers.
How do I fix ZDI-CAN-15762?
To fix ZDI-CAN-15762, update your NETGEAR R6700v3 router firmware to the latest version provided by NETGEAR.
Who is affected by ZDI-CAN-15762?
NETGEAR R6700v3 router users are affected by ZDI-CAN-15762, allowing network-adjacent attackers to exploit the vulnerability.
What impact does ZDI-CAN-15762 have on users?
The impact of ZDI-CAN-15762 includes unauthorized access to the router's functions, potentially compromising network security.
Can ZDI-CAN-15762 be exploited remotely?
No, ZDI-CAN-15762 requires an attacker to be on the same local network to exploit the vulnerability.