This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
Metrics
Affected Vendors & Products
References
History
Tue, 18 Feb 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: zdi
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-18T17:47:52.653Z
Reserved: 2022-03-22T00:00:00.000Z
Link: CVE-2022-27645

Updated: 2024-08-03T05:32:59.899Z

Status : Modified
Published: 2023-03-29T19:15:08.637
Modified: 2024-11-21T06:56:05.333
Link: CVE-2022-27645

No data.