High severity · published Dec 16, 2022
CVE-2022-47208
The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input
8.8
CVSS
2.2%
EPSS
No
On KEV
Description
The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NN
NETGEAR Nighthawk WiFi6 Router ·
NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90 · source: vendor
NA
Nighthawk Ax11000 Firmware · Netgear
before 1.0.9.90 · source: NVD
NA
Nighthawk Ax1800 Firmware · Netgear
before 1.0.9.90 · source: NVD
NA
Nighthawk Ax2400 Firmware · Netgear
before 1.0.9.90 · source: NVD
NA
Nighthawk Ax3000 Firmware · Netgear
before 1.0.9.90 · source: NVD
NA
Nighthawk Ax5400 Firmware · Netgear
before 1.0.9.90 · source: NVD
NA
Nighthawk Ax6000 Firmware · Netgear
before 1.0.9.90 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-47208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-47208
Vendor Advisory
https://www.tenable.com/security/research/tra-2022-37
More from NETGEAR Nighthawk WiFi6 Router
9.8
CVE-2023-27853
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device
9.8
CVE-2023-27852
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the…
8.8
CVE-2023-1205
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections
8.8
CVE-2023-27851
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the…
8.8
CVE-2022-47209
A support user exists on the device and appears to be a backdoor for Technical Support staff