Vulnerability in NETGEAR Ax2400
CVE-2022-4390
A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions do not appear to be applied to the WAN interface for IPv6. This allows arbitrary access to any services running on the device that may be inadvertently listening via IPv6, such as the SSH and Telnet servers spawned on ports 22 and 23 by default. This misconfiguration could allow an attacker to interact with services only intended to be accessible by clients on the local network.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.009 (58.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 59th percentile — 58.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: +0.000
Affected products
- NETGEAR Ax2400
- NETGEAR Ax2400 Firmware
- NETGEAR Nighthawk Rax30 — versions NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90
References
- www.tenable.com/security/research/tra-2022-36,
- www.synacktiv.com/en/publications/cool-vulns-dont-live-long-netgear-and-pwn2own… (Exploit, Patch, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-4390?
- CVE-2022-4390 is a critical-severity vulnerability in NETGEAR Ax2400. CVSS score: 10.0/10. Published 2022-12-09.
- How severe is CVE-2022-4390?
- Critical severity. CVSS v3 base score is 10.0 out of 10.