CVE-2022-48322

CRITICAL

9.8

Description

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published2/13/2023

Last Modified3/21/2025

Sourcenvd

Honeypot Sightings0

Affected Products

netgear:mr60netgear:mr60_firmwarenetgear:ms60netgear:ms60_firmwarenetgear:r6900pnetgear:r6900p_firmwarenetgear:r7000pnetgear:r7000p_firmwarenetgear:r7960pnetgear:r7960p_firmwarenetgear:r8000pnetgear:r8000p_firmware

Weaknesses (CWE)

CWE-787CWE-787

References

https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155(cve@mitre.org)

https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.