CVE Feed

    Dashboard / CVE / CVE-2023-23110

    CVE-2023-23110

    An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

    Published:Feb 2, 2023
    Last Modified:Mar 26, 2025
    EPS:Feb 2, 2023
    EPSS Score:0.0013
    CVSS Score:7.4

    Affected Products

    Vendor
    Netgear
    Product
    D6100
    Vendor
    Netgear
    Product
    D6100 Firmware
    Vendor
    Netgear
    Product
    Dgn1000v3
    Vendor
    Netgear
    Product
    Dgn1000v3 Firmware
    Vendor
    Netgear
    Product
    R8900
    Vendor
    Netgear
    Product
    R8900 Firmware
    Vendor
    Netgear
    Product
    R9000
    Vendor
    Netgear
    Product
    R9000 Firmware
    Vendor
    Netgear
    Product
    Wnr1000v2
    Vendor
    Netgear
    Product
    Wnr1000v2 Firmware
    Vendor
    Netgear
    Product
    Wnr2200
    Vendor
    Netgear
    Product
    Wnr2200 Firmware
    Vendor
    Netgear
    Product
    Wnr2500
    Vendor
    Netgear
    Product
    Wnr2500 Firmware
    Vendor
    Netgear
    Product
    Wnr612v2
    Vendor
    Netgear
    Product
    Wnr612v2 Firmware
    Vendor
    Netgear
    Product
    Xavn2001v2
    Vendor
    Netgear
    Product
    Xavn2001v2 Firmware

    Exploits

    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGcohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbcohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9shttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqihttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5ohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqjhttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9ohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5ihttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5shttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGcohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbcohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9shttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqihttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5ohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqjhttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9ohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5ihttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s

    Related CVEs

    CVE-2021-45550 (CVSS 6.6) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before …
    CVE-2021-38534 (CVSS 4.1) — Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76,…
    CVE-2021-38514 (CVSS 2.4) — Certain NETGEAR devices are affected by authentication bypass. This affects D3600 before 1.0.0.72, D6000 befor…
    CVE-2020-35808 (CVSS 4.8) — Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61,…
    CVE-2020-26913 (CVSS 6.8) — Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D…
    CVE-2017-18867 (CVSS 6.8) — Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 befor…
    CVE-2016-11059 (CVSS 7.5) — Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before…
    CVE-2018-21220 (CVSS 8.8) — Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 b…
    CVE-2018-21219 (CVSS 8.8) — Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 b…
    CVE-2018-21218 (CVSS 8.8) — Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 b…

    References

    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s
    https://www.netgear.com/about/security/
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i
    https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s
    https://www.netgear.com/about/security/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High