CVE-2022-38956 — n/a / n/a

Description (CNA)

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.netgear.com/about/security/
https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s

ADP enrichment

CVE

No English description supplied.

https://www.netgear.com/about/security/
https://hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1s

CISA-ADP

No English description supplied.

No references supplied.