Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m2rw-gwp5-6wqw

Опубликовано: 21 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-354