CVE-2022-27642

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Mar 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-276438.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9 CVE-2022-276448.8This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETG CVE-2022-276458.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authenti CVE-2022-276468.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9 CVE-2022-276478.0This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9 CVE-2022-276487.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interact CVE-2022-276497.5A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby CVE-2022-27659.8A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an CVE-2022-276507.5A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Do CVE-2022-276516.8A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker En CVE-2022-276525.3A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (CVE-2022-276537.8A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write pa