Network Vulnerability in NETGEAR R6700v3 Router

CVE-2022-27644

Summary

A vulnerability exists in NETGEAR R6700v3 routers where improper validation of the certificate during HTTPS file downloads allows network-adjacent attackers to interfere with the integrity of downloaded information. The flaw does not require any form of authentication to exploit, potentially enabling attackers to leverage this issue to execute arbitrary code as root, particularly when used alongside other vulnerabilities. Users should assess their router configurations and apply available updates to enhance security defenses.

References