CVE-2022-48322

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

0.68%

Published

Feb 13, 2023

Modified

Mar 21, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (12)

netgear · mr60_firmware (up to 1.1.7.132)vulnerable

netgear · mr60

netgear · ms60_firmware (up to 1.1.7.132)vulnerable

netgear · ms60

netgear · r6900p_firmware (up to 1.3.3.154)vulnerable

netgear · r6900p

netgear · r7000p_firmware (up to 1.3.3.154)vulnerable

· r7000p

References (2)

https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155

Vendor Advisory

https://kb.netgear.com/000065265/Security-Advisory-for-Pre-authentication-Buffer-Overflow-on-Multiple-Products-PSV-2022-0155

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs