Netgear R6700v3 信息泄露漏洞(CVE-2022-27642)
CVE编号
CVE-2022-27642利用情况
暂无补丁情况
N/A披露时间
2023-03-30漏洞描述
Netgear R6700v3是美国网件（Netgear）公司的一款路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。 Netgear R6700v3 httpd 服务存在信息泄露漏洞。该漏洞源于httpd服务中存在特定的缺陷，访问受保护页面时字符串匹配逻辑不正确。攻击者可以将此漏洞与其他漏洞结合起来，在根目录的上下文中执行代码。解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| https://kb.netgear.com/000064723/Security-Advisory-for-Multiple-Vulnerabiliti... | |
| https://www.zerodayinitiative.com/advisories/ZDI-22-518/ |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | netgear | cax80_firmware | * | Up to (excluding) 2.1.3.7 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | lax20_firmware | * | Up to (excluding) 1.1.6.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | mr60_firmware | * | Up to (excluding) 1.1.6.124 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | mr80_firmware | * | Up to (excluding) 1.1.6.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ms60_firmware | * | Up to (excluding) 1.1.6.124 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ms80_firmware | * | Up to (excluding) 1.1.6.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.1.78 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.4.126 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6700_firmware | * | Up to (excluding) 1.0.4.126 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6900p_firmware | * | Up to (excluding) 1.3.3.148 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000p_firmware | * | Up to (excluding) 1.3.3.148 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000_firmware | * | Up to (excluding) 1.0.11.134 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7100lg_firmware | * | Up to (excluding) 1.0.0.76 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7850_firmware | * | Up to (excluding) 1.0.5.84 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7900p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7960p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000_firmware | * | Up to (excluding) 1.0.4.84 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8500_firmware | * | Up to (excluding) 1.0.2.158 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax15_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax200_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax20_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax35_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax38_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax40_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax42_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax43_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax45_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax48_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax50s_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax50_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax75_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax80_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rs400_firmware | * | Up to (excluding) 1.5.1.86 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | cax80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | lax20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | mr60 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | mr80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ms60 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ms80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6700 | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7100lg | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7850 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7960p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax15 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax200 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax35 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax38 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax40 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax42 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax43 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax45 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax50s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax75 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rs400 | - | - | |||||
- 攻击路径 相邻
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-863 | 授权机制不正确 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论