CVE Feed

    Dashboard / CVE / CVE-2022-27642

    CVE-2022-27642

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.

    Published:Mar 29, 2023
    Last Modified:Feb 18, 2025
    EPS:Mar 29, 2023
    EPSS Score:0.00037
    CVSS Score:8.8

    Affected Products

    Vendor
    Netgear
    Product
    Cax80
    Vendor
    Netgear
    Product
    Cax80 Firmware
    Vendor
    Netgear
    Product
    Lax20
    Vendor
    Netgear
    Product
    Lax20 Firmware
    Vendor
    Netgear
    Product
    Mr60
    Vendor
    Netgear
    Product
    Mr60 Firmware
    Vendor
    Netgear
    Product
    Mr80
    Vendor
    Netgear
    Product
    Mr80 Firmware
    Vendor
    Netgear
    Product
    Ms60
    Vendor
    Netgear
    Product
    Ms60 Firmware
    Vendor
    Netgear
    Product
    Ms80
    Vendor
    Netgear
    Product
    Ms80 Firmware
    Vendor
    Netgear
    Product
    R6400
    Vendor
    Netgear
    Product
    R6400 Firmware
    Vendor
    Netgear
    Product
    R6700
    Vendor
    Netgear
    Product
    R6700 Firmware
    Vendor
    Netgear
    Product
    R6900p
    Vendor
    Netgear
    Product
    R6900p Firmware
    Vendor
    Netgear
    Product
    R7000
    Vendor
    Netgear
    Product
    R7000 Firmware
    Vendor
    Netgear
    Product
    R7000p
    Vendor
    Netgear
    Product
    R7000p Firmware
    Vendor
    Netgear
    Product
    R7100lg
    Vendor
    Netgear
    Product
    R7100lg Firmware
    Vendor
    Netgear
    Product
    R7850
    Vendor
    Netgear
    Product
    R7850 Firmware
    Vendor
    Netgear
    Product
    R7900p
    Vendor
    Netgear
    Product
    R7900p Firmware
    Vendor
    Netgear
    Product
    R7960p
    Vendor
    Netgear
    Product
    R7960p Firmware
    Vendor
    Netgear
    Product
    R8000
    Vendor
    Netgear
    Product
    R8000 Firmware
    Vendor
    Netgear
    Product
    R8000p
    Vendor
    Netgear
    Product
    R8000p Firmware
    Vendor
    Netgear
    Product
    R8500
    Vendor
    Netgear
    Product
    R8500 Firmware
    Vendor
    Netgear
    Product
    Rax15
    Vendor
    Netgear
    Product
    Rax15 Firmware
    Vendor
    Netgear
    Product
    Rax20
    Vendor
    Netgear
    Product
    Rax200
    Vendor
    Netgear
    Product
    Rax200 Firmware
    Vendor
    Netgear
    Product
    Rax20 Firmware
    Vendor
    Netgear
    Product
    Rax35
    Vendor
    Netgear
    Product
    Rax35 Firmware
    Vendor
    Netgear
    Product
    Rax38
    Vendor
    Netgear
    Product
    Rax38 Firmware
    Vendor
    Netgear
    Product
    Rax40
    Vendor
    Netgear
    Product
    Rax40 Firmware
    Vendor
    Netgear
    Product
    Rax42
    Vendor
    Netgear
    Product
    Rax42 Firmware
    Vendor
    Netgear
    Product
    Rax43
    Vendor
    Netgear
    Product
    Rax43 Firmware
    Vendor
    Netgear
    Product
    Rax45
    Vendor
    Netgear
    Product
    Rax45 Firmware
    Vendor
    Netgear
    Product
    Rax48
    Vendor
    Netgear
    Product
    Rax48 Firmware
    Vendor
    Netgear
    Product
    Rax50
    Vendor
    Netgear
    Product
    Rax50 Firmware
    Vendor
    Netgear
    Product
    Rax50s
    Vendor
    Netgear
    Product
    Rax50s Firmware
    Vendor
    Netgear
    Product
    Rax75
    Vendor
    Netgear
    Product
    Rax75 Firmware
    Vendor
    Netgear
    Product
    Rax80
    Vendor
    Netgear
    Product
    Rax80 Firmware
    Vendor
    Netgear
    Product
    Rs400
    Vendor
    Netgear
    Product
    Rs400 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High