Buffer overflow in NETGEAR Cax80
CVE-2022-24655
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (64.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 64.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- NETGEAR Cax80
- NETGEAR Cax80 Firmware — versions 2.1.2.6
- NETGEAR Dc112a
- NETGEAR Dc112a Firmware — versions 1.0.0.62
- NETGEAR Ex6100
- NETGEAR Ex6100 Firmware — versions 201.0.2.28
- NETGEAR Ex6200
- NETGEAR Ex6200 Firmware
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.netgear.com/about/security/ (Vendor Advisory)
- kb.netgear.com/000064615/Security-Advisory-for-Pre-Authentication-Command-Injec… (Vendor Advisory)
- github.com/doudoudedi/Netgear_product_stack_overflow/blob/main/NETGEAR EX serie… (Exploit, Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-24655?
- CVE-2022-24655 is a high-severity vulnerability in NETGEAR Cax80, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2022-03-18.
- How severe is CVE-2022-24655?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2022-24655 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.