This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.

Project Subscriptions

Vendors Products
Netgear Subscribe
Lax20 Firmware Subscribe
R6400 Firmware Subscribe
R6700 Firmware Subscribe
R7000 Firmware Subscribe
R7850 Firmware Subscribe
R7900p Firmware Subscribe
R7960p Firmware Subscribe
R8000 Firmware Subscribe
R8000p Firmware Subscribe
R8500 Firmware Subscribe
Rax15 Firmware Subscribe
Rax200 Firmware Subscribe
Rax20 Firmware Subscribe
Rax35 Firmware Subscribe
Rax38 Firmware Subscribe
Rax40 Firmware Subscribe
Rax42 Firmware Subscribe
Rax43 Firmware Subscribe
Rax45 Firmware Subscribe
Rax48 Firmware Subscribe
Rax50 Firmware Subscribe
Rax50s Firmware Subscribe
Rax75 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-32146 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 18 Feb 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published:

Updated: 2025-02-18T17:47:52.653Z

Reserved: 2022-03-22T00:00:00.000Z

Link: CVE-2022-27645

cve-icon Vulnrichment

Updated: 2024-08-03T05:32:59.899Z

cve-icon NVD

Status : Modified

Published: 2023-03-29T19:15:08.637

Modified: 2024-11-21T06:56:05.333

Link: CVE-2022-27645

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses