CVE-2022-38955 — n/a / n/a

Description (CNA)

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.netgear.com/about/security/
https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s

ADP enrichment

CVE

No English description supplied.

https://www.netgear.com/about/security/
https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s

CISA-ADP

No English description supplied.

No references supplied.