Netgear’s vulnerability in devices, operated at stage before authentication

Netgear released Updating the firmware to the wireless routers of the RAX40, RAX35, R6400V2, R6700V3, R6900P, R7000P, R7000, R7960P and R8000P series, in which the vulnerability is eliminated (CVE-2022-48196), which allows to achieve the overcrowding of the buffer without authentication. Technical details and information on the presence of exploites are not yet given, but judging by the exhibited level of danger and recommendations to immediately update the firmware, the problem resembles the November vulnerability, which made it possible to achieve its Root code through manipulations in the external network on the WAN-interface side.

/Media reports cited above.