CVE-2022-27646: netgear cbr40 Stack-based Buffer Overflow

Vulnerability summary

CVE-2022-27646 is a high (CVSS 8.8) Stack-based Buffer Overflow vulnerability in netgear cbr40. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities.

Timeline

1. 29-03-2023
   PublishedVulnerability first disclosed.
2. 18-02-2025
   Last modifiedVulnerability information updated.

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the circled daemon. A crafted circleinfo.txt file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15879.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).