CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2022-48176
High (7.8) in netgear. EPSS 0.4% chance of exploitation in the next 30 days.
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:mr60_firmware
- netgear:ms60_firmware
- netgear:r6900p_firmware
- netgear:r7000p_firmware
- netgear:r7960p_firmware
- netgear:r8000p_firmware
References
- https://hdwsec.fr/blog/20221109-netgear/
- https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146
- https://www.netgear.com/about/security/
- https://hdwsec.fr/blog/20221109-netgear/
- https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146