CVE-2023-23110
Summary
| CVE | CVE-2023-23110 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-02-02 15:17:00 UTC |
| Updated | 2023-02-09 21:51:00 UTC |
| Description | An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier. |
Risk And Classification
Problem Types: CWE-494
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | D6100 | - | All | All | All |
| Operating System | Netgear | D6100 Firmware | All | All | All | All |
| Hardware | Netgear | Dgn1000v3 | - | All | All | All |
| Operating System | Netgear | Dgn1000v3 Firmware | All | All | All | All |
| Hardware | Netgear | R8900 | - | All | All | All |
| Operating System | Netgear | R8900 Firmware | All | All | All | All |
| Hardware | Netgear | R9000 | - | All | All | All |
| Operating System | Netgear | R9000 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr1000v2 | - | All | All | All |
| Operating System | Netgear | Wnr1000v2 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr2200 | - | All | All | All |
| Operating System | Netgear | Wnr2200 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr2500 | - | All | All | All |
| Operating System | Netgear | Wnr2500 Firmware | All | All | All | All |
| Hardware | Netgear | Wnr612v2 | - | All | All | All |
| Operating System | Netgear | Wnr612v2 Firmware | All | All | All | All |
| Hardware | Netgear | Xavn2001v2 | - | All | All | All |
| Operating System | Netgear | Xavn2001v2 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| A Firmware Modification Vulnerability During Firmware Update in Netgear R9000 Smart WiFi Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear DGN1000 Modem Router - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR2500 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear XAVN2001 Wireless-N Extender - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear D6100 WiFi DSL Modem Router - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR1000 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear D6100 WiFi DSL Modem Router - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear XAVN2001 Wireless-N Extender - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR612 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR2500 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear DGN1000 Modem Router - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear R8900 Smart WiFi Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR2200 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR612 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR1000 Wireless Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear WNR2200 Wireless Routers - HackMD | MISC | hackmd.io | |
| www.netgear.com/about/security | MISC | www.netgear.com | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear R9000 Smart WiFi Routers - HackMD | MISC | hackmd.io | |
| A Firmware Modification Vulnerability During Firmware Update in Netgear R8900 Smart WiFi Routers - HackMD | MISC | hackmd.io | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.