CVE-2022-27645

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.

• netgear lax20 firmware (< 1.1.6.34) • netgear r6400 firmware (< 1.0.4.126) • netgear r6700 firmware (< 1.0.4.126) • netgear r7000 firmware (< 1.0.11.134) • netgear r7850 firmware (< 1.0.5.84) • netgear r7900p firmware (< 1.4.3.88) • netgear r7960p firmware (< 1.4.3.88) • netgear r8000 firmware (< 1.0.4.84) • netgear r8000p firmware (< 1.4.3.88) • netgear r8500 firmware (< 1.0.2.158) • netgear rax15 firmware (< 1.0.10.110) • netgear rax20 firmware (< 1.0.10.110) • netgear rax200 firmware (< 1.0.6.138) • netgear rax35 firmware (< 1.0.10.110) • netgear rax38 firmware (< 1.0.10.110) • netgear rax40 firmware (< 1.0.10.110) • netgear rax42 firmware (< 1.0.10.110) • netgear rax43 firmware (< 1.0.10.110) • netgear rax45 firmware (< 1.0.10.110) • netgear rax48 firmware (< 1.0.10.110) • netgear rax50 firmware (< 1.0.10.110) • netgear rax50s firmware (< 1.0.10.110) • netgear rax75 firmware (< 1.0.6.138)