Is CVE-2022-27643 in the CISA KEV catalog?

No. CVE-2022-27643 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2022-27643?

CVE-2022-27643 has a CVSS v3 base score of 8.8 (HIGH).

What is the EPSS score for CVE-2022-27643?

CVE-2022-27643 has an EPSS score of 25.11% (98th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2022-27643?

Upgrade d6220 firmware to 1.0.0.80 or later. Fixes are available for 27 affected products.

CVE & CISA-KEV Catalog

CVE-2022-27643

HIGHEPSS 98th pctl

8.8

CVSS v3

NVD

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the process does not properly validate the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15692.

CWE-120Classic Buffer Overflow

How to fix

Remediation Available

d6220 firmwareNVD

Affected:< 1.0.0.80Fixed in:1.0.0.80CVE-2022-27643derived from NVD

d6400 firmwareNVD

Affected:< 1.0.0.114Fixed in:1.0.0.114CVE-2022-27643derived from NVD

d7000v2 firmwareNVD

Affected:< 1.0.0.80Fixed in:1.0.0.80CVE-2022-27643derived from NVD

dc112a firmwareNVD

Affected:< 1.0.0.64Fixed in:1.0.0.64CVE-2022-27643derived from NVD

ex3700 firmwareNVD

Affected:< 1.0.0.96Fixed in:1.0.0.96CVE-2022-27643derived from NVD

ex3800 firmwareNVD

Affected:< 1.0.0.96Fixed in:1.0.0.96CVE-2022-27643derived from NVD

ex6120 firmwareNVD

Affected:< 1.0.0.68Fixed in:1.0.0.68CVE-2022-27643derived from NVD

ex6130 firmwareNVD

Affected:< 1.0.0.48Fixed in:1.0.0.48CVE-2022-27643derived from NVD

r6400 firmwareNVD

Affected:< 1.0.4.126Fixed in:1.0.4.126CVE-2022-27643derived from NVD

r6700 firmwareNVD

Affected:< 1.0.4.126Fixed in:1.0.4.126CVE-2022-27643derived from NVD

r6900p firmwareNVD

Affected:< 1.3.3.148Fixed in:1.3.3.148CVE-2022-27643derived from NVD

r7000 firmwareNVD

Affected:< 1.0.11.134Fixed in:1.0.11.134CVE-2022-27643derived from NVD

r7000p firmwareNVD

Affected:< 1.3.3.148Fixed in:1.3.3.148CVE-2022-27643derived from NVD

r7100lg firmwareNVD

Affected:< 1.0.0.76Fixed in:1.0.0.76CVE-2022-27643derived from NVD

r7850 firmwareNVD

Affected:< 1.0.5.84Fixed in:1.0.5.84CVE-2022-27643derived from NVD

r7900p firmwareNVD

Affected:< 1.4.3.88Fixed in:1.4.3.88CVE-2022-27643derived from NVD

r7960p firmwareNVD

Affected:< 1.4.3.88Fixed in:1.4.3.88CVE-2022-27643derived from NVD

r8000 firmwareNVD

Affected:< 1.0.4.84Fixed in:1.0.4.84CVE-2022-27643derived from NVD

r8000p firmwareNVD

Affected:< 1.4.3.88Fixed in:1.4.3.88CVE-2022-27643derived from NVD

r8500 firmwareNVD

Affected:< 1.0.2.158Fixed in:1.0.2.158CVE-2022-27643derived from NVD

rax200 firmwareNVD

Affected:< 1.0.6.138Fixed in:1.0.6.138CVE-2022-27643derived from NVD

rax75 firmwareNVD

Affected:< 1.0.6.138Fixed in:1.0.6.138CVE-2022-27643derived from NVD

rax80 firmwareNVD

Affected:< 1.0.6.138Fixed in:1.0.6.138CVE-2022-27643derived from NVD

rs400 firmwareNVD

Affected:< 1.5.1.86Fixed in:1.5.1.86CVE-2022-27643derived from NVD

wndr3400 firmwareNVD

Affected:< 1.0.1.44Fixed in:1.0.1.44CVE-2022-27643derived from NVD

wnr3500l firmwareNVD

Affected:< 1.2.0.72Fixed in:1.2.0.72CVE-2022-27643derived from NVD

xr300 firmwareNVD

Affected:< 1.0.3.72Fixed in:1.0.3.72CVE-2022-27643derived from NVD

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

25.11%probability of exploitation in 30 days

98thpercentile

Very high risk: more likely to be exploited than 98% of all known CVEs.

References

Vendor Advisory1

kb.netgear.com

Third-Party Advisory1

zerodayinitiative.com

Related Vulnerabilities

Other CWE-120 (Classic Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2014-0195	Medium	6.8	100%	-	Fix
CVE-2017-7269	Critical	9.8	100%	KEV	-
CVE-2019-11043	High	8.7	99%	KEV + Ransom	Fix
CVE-2011-4862	High	10.0	95%	-	Fix
CVE-2007-5659	High	7.8	94%	KEV	Fix
CVE-2022-3786	High	7.5	92%	-	Fix

Embed a live status badge for CVE-2022-27643

Markdown

[![CVE-2022-27643](https://tridentstack.com/cve/badge/CVE-2022-27643.svg)](https://tridentstack.com/cve/CVE-2022-27643)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-27643"><img src="https://tridentstack.com/cve/badge/CVE-2022-27643.svg" alt="CVE-2022-27643"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.