Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6662-6w2g-g564

Опубликовано: 20 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v1.2.3.7 and earlier.

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v1.2.3.7 and earlier.

EPSS

Процентиль: 63%
0.00455
Низкий

8.1 High

CVSS3

Дефекты

CWE-494

Связанные уязвимости

CVSS3: 8.1
nvd
около 3 лет назад

An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v1.2.3.7 and earlier.

EPSS

Процентиль: 63%
0.00455
Низкий

8.1 High

CVSS3

Дефекты

CWE-494