CVE-2022-46424

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.

Score

CVSS 3.1 8.1 High

Status

Modified - cve@mitre.org

Published

2022-12-20

Last modified

2025-04-16

Affected products

• Xwn5001 Firmware (Netgear)

References

• https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1rKQuzDj
• https://www.netgear.com/about/security/