Netgear R8500 Vulnerabilidad

Versión

1.0.2.158	4
1.0.1.0	2
1.0.1.1	2
1.0.1.2	2
1.0.1.3	2

Contramedidas

Official Fix	48
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Explotabilidad

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	52

Vector de acceso

Not Defined	0
Physical	0
Local	10
Adjacent	32
Network	10

Autenticación

Not Defined	0
High	0
Low	22
None	30

La interacción del usuario

Not Defined	0
Required	6
None	46

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	16
≤7	20
≤8	4
≤9	2
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	26
≤7	10
≤8	4
≤9	8
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	20
≤7	10
≤8	2
≤9	8
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	6
≤7	18
≤8	4
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	2
≤10	6

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	0
<10k	8
<25k	38
<50k	6
<100k	0
≥100k	0

Explotar hoy

<1k	34
<2k	8
<5k	4
<10k	4
<25k	2
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (45): 1.0.1, 1.0.1.1, 1.0.1.2, 1.0.1.3, 1.0.1.4, 1.0.1.5, 1.0.1.6, 1.0.1.7, 1.0.1.8, 1.0.1.9, 1.0.1.11, 1.0.1.12, 1.0.1.13, 1.0.1.14, 1.0.1.15, 1.0.1.16, 1.0.1.17, 1.0.1.18, 1.0.1.19, 1.0.1.21, 1.0.1.22, 1.0.1.23, 1.0.1.24, 1.0.1.25, 1.0.1.26, 1.0.1.27, 1.0.1.28, 1.0.1.29, 1.0.1.31, 1.0.1.32, 1.0.1.33, 1.0.1.34, 1.0.1.35, 1.0.1.36, 1.0.1.37, 1.0.1.38, 1.0.1.39, 1.0.1.41, 1.0.1.42, 1.0.1.43, 1.0.1.44, 1.0.1.45, 1.0.1.46, 1.0.1.47, 1.0.2.158

Link to Product Website: https://www.netgear.com/

Tipo de software: Wireless LAN Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2022-03-26	6.3	6.1	Netgear R8500 ipv6_fix.cgi escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-27947
2022-03-26	6.3	6.1	Netgear R8500 admin_account.cgi escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2022-27946
2022-03-26	6.3	6.1	Netgear R8500 password.cgi escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-27945
2021-12-26	9.2	9.0	Netgear R8300 escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45624
2021-12-26	9.2	9.0	Netgear XR300 escalada de privilegios	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45621
2021-12-26	9.2	9.0	Netgear RBS850 escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.08	CVE-2021-45615
2021-12-26	9.2	9.0	Netgear RAX80 desbordamiento de búfer	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45611
2021-12-26	9.2	9.0	Netgear D8500 desbordamiento de búfer	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-45609
2021-12-26	6.7	6.5	Netgear XR500 escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-45550
2021-12-26	8.8	8.6	Netgear RBK852 desbordamiento de búfer	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	CVE-2021-45527