CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj
https://www.netgear.com/about/security/	Vendor Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj
https://www.netgear.com/about/security/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:netgear:xwn5001_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:xwn5001:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:30

Type	Values Removed	Values Added
References	~~() https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj -~~	() https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj -
References	~~() https://www.netgear.com/about/security/ - Vendor Advisory~~	() https://www.netgear.com/about/security/ - Vendor Advisory
Summary		(es) Se descubrió una vulnerabilidad de modificación de firmware explotable en el punto de acceso WiFi Netgear XWN5001 Powerline 500. Un atacante puede realizar un ataque MITM (Man-in-the-Middle) para modificar la imagen de firmware cargada por el usuario y eludir la verificación CRC, lo que permite a los atacantes ejecutar código arbitrario o provocar una Denegación de Servicio (DoS). Esto afecta a la versión 0.4.1.1 y anteriores.

Information

Published : 2022-12-20 20:15

Updated : 2025-04-16 19:15

NVD link : CVE-2022-46424

Mitre link : CVE-2022-46424

CVE.ORG link : CVE-2022-46424

JSON object : View

Products Affected

netgear

xwn5001_firmware
xwn5001

CWE

NVD-CWE-noinfo

{"id": "CVE-2022-46424", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2022-12-20T20:15:10.630", "references": [{"url": "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj", "source": "cve@mitre.org"}, {"url": "https://www.netgear.com/about/security/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.netgear.com/about/security/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier."}, {"lang": "es", "value": "Se descubri\u00f3 una vulnerabilidad de modificaci\u00f3n de firmware explotable en el punto de acceso WiFi Netgear XWN5001 Powerline 500. Un atacante puede realizar un ataque MITM (Man-in-the-Middle) para modificar la imagen de firmware cargada por el usuario y eludir la verificaci\u00f3n CRC, lo que permite a los atacantes ejecutar c\u00f3digo arbitrario o provocar una Denegaci\u00f3n de Servicio (DoS). Esto afecta a la versi\u00f3n 0.4.1.1 y anteriores."}], "lastModified": "2025-04-16T19:15:48.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netgear:xwn5001_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C99C976-B3DD-47B9-B50C-A6CF1DF8D7FB", "versionEndIncluding": "0.4.1.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:xwn5001:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5EEF5DCA-0EDB-4966-95AC-52B2661B8D1B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}