CVE-2022-48322

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 32.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Netgear Mr60 FirmwareNetgear Ms60 FirmwareNetgear R6900p Firmware+3 more
Timeline
PublishedFeb 13

Description

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

▶NVDnetgear/mr60_firmware< 1.1.7.132
▶NVDnetgear/ms60_firmware< 1.1.7.132
▶NVDnetgear/r6900p_firmware< 1.3.3.154
▶NVDnetgear/r7000p_firmware< 1.3.3.154
▶NVDnetgear/r7960p_firmware< 1.4.4.94

🔴Vulnerability Details

2
GHSA
GHSA-fqmr-3mv2-53x7: NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability↗2023-02-13
▶
CVEList
CVE-2022-48322: NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability↗2023-02-13
▶
CVE-2022-48322 (CRITICAL CVSS 9.8) | NETGEAR Nighthawk WiFi Mesh systems | cvebase.io