NETGEAR R6700v3命令执行 (CVE-2022-27647)
CVE编号
CVE-2022-27647利用情况
暂无补丁情况
N/A披露时间
2022-06-23漏洞描述
NETGEAR R6700v3可能允许远程身份验证的攻击者在系统上执行任意命令，这是由于处理提供给libreadcycloud.so的名称或电子邮件字段时存在缺陷所致。通过发送特制的请求，攻击者可以利用此漏洞在系统上执行任意命令。解决建议
有关修补程序、升级或建议的解决方法信息，请参阅PSV-2021-0327。请参见参考文献。受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | netgear | cax80_firmware | * | Up to (excluding) 2.1.3.7 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | lax20_firmware | * | Up to (excluding) 1.1.6.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | mr60_firmware | * | Up to (excluding) 1.1.6.124 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | mr80_firmware | * | Up to (excluding) 1.1.6.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ms60_firmware | * | Up to (excluding) 1.1.6.124 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | ms80_firmware | * | Up to (excluding) 1.1.6.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.1.78 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6400_firmware | * | Up to (excluding) 1.0.4.126 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6700_firmware | * | Up to (excluding) 1.0.4.126 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r6900p_firmware | * | Up to (excluding) 1.3.3.148 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000p_firmware | * | Up to (excluding) 1.3.3.148 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7000_firmware | * | Up to (excluding) 1.0.11.134 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7100lg_firmware | * | Up to (excluding) 1.0.0.76 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7850_firmware | * | Up to (excluding) 1.0.5.84 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7900p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r7960p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000p_firmware | * | Up to (excluding) 1.4.3.88 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8000_firmware | * | Up to (excluding) 1.0.4.84 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | r8500_firmware | * | Up to (excluding) 1.0.2.158 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax15_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax200_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax20_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax35_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax38_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax40_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax42_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax43_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax45_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax48_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax50s_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax50_firmware | * | Up to (excluding) 1.0.10.110 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax75_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rax80_firmware | * | Up to (excluding) 1.0.6.138 | |||||
| 运行在以下环境 | |||||||||
| 系统 | netgear | rs400_firmware | * | Up to (excluding) 1.5.1.86 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | cax80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | lax20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | mr60 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | mr80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ms60 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | ms80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6400 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6700 | v3 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r6900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7100lg | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7850 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7900p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r7960p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8000p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | r8500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax15 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax200 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax35 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax38 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax40 | v2 | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax42 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax43 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax45 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax50s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax75 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rax80 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | netgear | rs400 | - | - | |||||
- 攻击路径 相邻
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-78 | OS命令中使用的特殊元素转义处理不恰当（OS命令注入） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论