CVE-2022-48176

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
netgearr7000p_firmware
𝑥
< 1.3.3.154
netgearr6900p_firmware
𝑥
< 1.3.3.154
netgearr7960p_firmware
𝑥
< 1.4.4.94
netgearr8000p_firmware
𝑥
< 1.4.4.94
netgearmr60_firmware
𝑥
< 1.1.7.132
netgearms60_firmware
𝑥
< 1.1.7.132
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://hdwsec.fr/blog/20221109-netgear/
https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146
https://www.netgear.com/about/security/
https://hdwsec.fr/blog/20221109-netgear/
https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146
https://www.netgear.com/about/security/