Backdoor Vulnerability in Technical Support Account for Affected Device by Vendor
CVE-2022-47209

8.8HIGH

Key Information:

Vendor

Netgear
Status
Netgear Nighthawk Wifi6 Router
Vendor
CVE Published:
16 December 2022

What is CVE-2022-47209?

A backdoor vulnerability has been identified in certain devices that involves a support user account, intending to assist Technical Support staff. This account has a default password set to 'support', which is hardcoded and cannot be modified through standard user interfaces. This situation allows unauthorized access to the device, potentially compromising the security of the system. Effective remediation strategies should be implemented to safeguard against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NETGEAR Nighthawk WiFi6 Router NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90

References

https://www.tenable.com/security/research/tra-2022-37

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.