Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23110

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

Published

2023-02-02T15:17:43.473

Last Modified

2025-03-26T21:15:18.670

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.4 (HIGH)

Weaknesses
  • Type: Primary
    CWE-494
  • Type: Secondary
    CWE-494
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear wnr612v2_firmware ≤ 1.0.0.3 Yes
Hardware netgear wnr612v2 - No
Operating System netgear dgn1000v3_firmware ≤ 1.0.0.22 Yes
Hardware netgear dgn1000v3 - No
Operating System netgear d6100_firmware ≤ 1.0.0.63 Yes
Hardware netgear d6100 - No
Operating System netgear wnr1000v2_firmware ≤ 1.1.2.60 Yes
Hardware netgear wnr1000v2 - No
Operating System netgear xavn2001v2_firmware ≤ 0.4.0.7 Yes
Hardware netgear xavn2001v2 - No
Operating System netgear wnr2200_firmware ≤ 1.0.1.102 Yes
Hardware netgear wnr2200 - No
Operating System netgear wnr2500_firmware ≤ 1.0.0.34 Yes
Hardware netgear wnr2500 - No
Operating System netgear r8900_firmware ≤ 1.0.3.6 Yes
Hardware netgear r8900 - No
Operating System netgear r9000_firmware ≤ 1.0.3.6 Yes
Hardware netgear r9000 - No
References