CRLF Injection Vulnerability in Nighthawk R6220 AC1200 Smart Wi-Fi Router by NETGEAR
CVE-2022-47052

6.1MEDIUM

Key Information:

Vendor
Netgear
Status
Ac1200 R6220 Firmware
Vendor
CVE Published:
26 January 2023

Summary

The Nighthawk R6220 AC1200 Smart Wi-Fi Router's web interface is susceptible to a CRLF Injection vulnerability. This weakness allows an unauthenticated attacker to exploit the device using a specially crafted URL. By manipulating the input, the attacker can execute Reflected XSS and HTML Injection, leading to potential unauthorized access and exploitation of user sessions. It is critical for users to upgrade to secure firmware versions to mitigate risks associated with this vulnerability.

References

https://github.com/dest-3/NETGEAR/tree/main/CVE-2022-47052

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.