Vulnerability Description
An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Wpn824Ext Firmware | 1.1.1_1.1.9 |
| Netgear | Wpn824Ext | - |
Related Weaknesses (CWE)
References
- https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s
- https://www.netgear.com/about/security/Vendor Advisory
- https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s
- https://www.netgear.com/about/security/Vendor Advisory
FAQ
What is CVE-2022-38955?
CVE-2022-38955 is a vulnerability with a CVSS score of 7.5 (HIGH). An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and byp...
How severe is CVE-2022-38955?
CVE-2022-38955 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-38955?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Wpn824Ext Firmware, Netgear Wpn824Ext.