An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00381.

Exploitation poc

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

AND
cpe:2.3:o:netgear:wnr612v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr612v2:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:netgear:dgn1000v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgn1000v3:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:netgear:d6100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:d6100:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:netgear:wnr1000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr1000v2:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:netgear:xavn2001v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xavn2001v2:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:netgear:wnr2200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr2200:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:netgear:wnr2500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnr2500:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Netgear Subscribe
D6100 Subscribe
D6100 Firmware Subscribe
Dgn1000v3 Subscribe
Dgn1000v3 Firmware Subscribe
R8900 Subscribe
R8900 Firmware Subscribe
R9000 Subscribe
R9000 Firmware Subscribe
Wnr1000v2 Subscribe
Wnr1000v2 Firmware Subscribe
Wnr2200 Subscribe
Wnr2200 Firmware Subscribe
Wnr2500 Subscribe
Wnr2500 Firmware Subscribe
Wnr612v2 Subscribe
Wnr612v2 Firmware Subscribe
Xavn2001v2 Subscribe
Xavn2001v2 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-27210 An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i cve-icon cve-icon
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s cve-icon cve-icon
https://www.netgear.com/about/security/ cve-icon cve-icon
History

Wed, 26 Mar 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-03-26T20:39:41.477Z

Reserved: 2023-01-11T00:00:00.000Z

Link: CVE-2023-23110

cve-icon Vulnrichment

Updated: 2024-08-02T10:28:39.174Z

cve-icon NVD

Status : Modified

Published: 2023-02-02T15:17:43.473

Modified: 2025-03-26T21:15:18.670

Link: CVE-2023-23110

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses