CVE-2022-27645highCWE-306

CVE-2022-27645: high-severity vulnerability in NETGEAR R6700v3

Published · Updated

Follow this CVE+ Monitor R6700v3

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.3%
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
NETGEAR · R6700v3
Related CVEs — NETGEAR R6700v3

In the same product, most dangerous first.

CVE-2022-27643HIGHCVE-2022-27643EPSS 25.2%CVE-2022-27647HIGHCVE-2022-27647EPSS 1.5%CVE-2022-27646HIGHCVE-2022-27646EPSS 1.4%CVE-2022-27641HIGHCVE-2022-27641EPSS 1.2%CVE-2022-27642MEDIUMCVE-2022-27642EPSS 0.9%CVE-2022-27644MEDIUMCVE-2022-27644EPSS 0.3%