Vulnerability Details CVE-2022-38955
An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.5%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-38955
-
cpe:2.3:h:netgear:wpn824ext:-
-
cpe:2.3:o:netgear:wpn824ext_firmware:1.1.1_1.1.9