Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-38955

Опубликовано: 20 сент. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:netgear:wpn824ext_firmware:1.1.1_1.1.9:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wpn824ext:-:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-354
CWE-354

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

EPSS

Процентиль: 28%
0.00097
Низкий

7.5 High

CVSS3

Дефекты

CWE-354
CWE-354