Backdoor Vulnerability in Technical Support Account for Affected Device by Vendor
CVE-2022-47209

8.8HIGH

Key Information:

Vendor
Netgear
Status
NETGEAR Nighthawk WiFi6 Router
Vendor
CVE Published:
16 December 2022

Summary

A backdoor vulnerability has been identified in certain devices that involves a support user account, intending to assist Technical Support staff. This account has a default password set to 'support', which is hardcoded and cannot be modified through standard user interfaces. This situation allows unauthorized access to the device, potentially compromising the security of the system. Effective remediation strategies should be implemented to safeguard against unauthorized access.

Affected Version(s)

NETGEAR Nighthawk WiFi6 Router NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90

References

https://www.tenable.com/security/research/tra-2022-37

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.