A vulnerability, which was classified as critical, was found in Netgear XR1000 1.0.0.52_1.0.38 (Wireless LAN Software). This affects an unknown functionality of the component SOAP Message Handler. The manipulation with an unknown input leads to a weak authentication vulnerability. CWE is classifying the issue as CWE-306. The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. This is going to have an impact on confidentiality. The summary by CVE is:

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue results from a lack of authentication required for a privileged request. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13325.

The weakness was disclosed 01/25/2022. The advisory is shared at zerodayinitiative.com. This vulnerability is uniquely identified as CVE-2021-34870 since 06/17/2021. The exploitability is told to be easy. The attack can only be done within the local network. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 01/28/2022).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfoedit

Type

• Wireless LAN Software

Vendor

• Netgear

Name

• XR1000

CPE 2.3infoedit

• 🔒

CPE 2.2infoedit

• 🔒

CVSSv3infoedit

CVSSv2infoedit

Exploitinginfoedit

Threat Intelligenceinfoedit

Countermeasuresinfoedit

Timelineinfoedit

Sourcesinfoedit

Entryinfoedit

Comments