Authentication Bypass in NETGEAR Routers

CVE-2022-27642

Summary

This vulnerability enables attackers with network access to bypass authentication on specific versions of NETGEAR R6700v3 routers. Exploiting a flaw in the httpd service's string matching logic, attackers can gain unauthorized access to protected pages without needing authentication. This weakness could potentially be exploited alongside other vulnerabilities to execute malicious code in a root context, posing significant risks to affected systems.

References