Denial of Service Vulnerability in Netgear WNR2000 Router
CVE-2022-46422

4.8MEDIUM

Key Information:

Vendor

Netgear
Status
Wnr2000 Firmware
Vendor
CVE Published:
20 December 2022

What is CVE-2022-46422?

A vulnerability exists in the firmware of the Netgear WNR2000 router that allows authenticated attackers to trigger a Denial of Service (DoS). This can be executed by uploading a specially crafted firmware image during the update process, potentially rendering the device inoperative and disrupting network access. Users are advised to apply any security patches provided by Netgear and monitor their devices for unauthorized firmware updates.

References

https://www.netgear.com/about/security/
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/B1bFKBWwi

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.