{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T23:23:16.802","vulnerabilities":[{"cve":{"id":"CVE-2022-27643","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2023-03-29T19:15:08.497","lastModified":"2026-06-17T04:37:24.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SOAP requests. When parsing the SOAPAction header, the process does not properly validate the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15692."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"NETGEAR","product":"R6700v3","versions":[{"version":"1.0.4.120_10.0.91","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-18T17:49:08.208403Z","id":"CVE-2022-27643","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.78","matchCriteriaId":"A41218DC-3A06-4582-A8B8-0320F76F3DFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*","matchCriteriaId":"3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.4.126","matchCriteriaId":"AFC79CFE-9036-472C-AB28-FF293BBE1780"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*","matchCriteriaId":"52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.4.126","matchCriteriaId":"169E2D0D-7D18-4AF1-8683-346BD1069DC1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*","matchCriteriaId":"5A09A9E8-8C77-4EDB-9483-B3C540EF083A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.3.148","matchCriteriaId":"E52E9373-C896-405F-9CEC-2E8707B249F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*","matchCriteriaId":"C41908FF-AE64-4949-80E3-BEE061B2DA8A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.11.134","matchCriteriaId":"5376DD03-0DDD-4B0C-A185-EC226515B32A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*","matchCriteriaId":"C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.3.148","matchCriteriaId":"5D67D8C3-98DA-4B7D-BA7D-AB5F13E627F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*","matchCriteriaId":"DFE55F4D-E98B-46D3-B870-041141934CD1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.5.84","matchCriteriaId":"8EA99A24-E836-40F4-BF61-C4489E3713F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*","matchCriteriaId":"DAF94D73-B6D0-4334-9A41-83AA92B7C6DF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.3.88","matchCriteriaId":"CBD3DCC5-342C-4E66-8BFB-545C2D375A81"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*","matchCriteriaId":"F3D6A70D-66AF-4064-9F1B-4358D4B1F016"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.3.88","matchCriteriaId":"150CF98F-A933-4CF2-A4FF-5AF15A9E1E18"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*","matchCriteriaId":"091CEDB5-0069-4253-86D8-B9FE17CB9F24"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.4.84","matchCriteriaId":"72325BC2-C9AC-4B24-865E-662BDF05BD99"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*","matchCriteriaId":"5B39F095-8FE8-43FD-A866-7B613B495984"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.3.88","matchCriteriaId":"994D00CD-350B-4059-9C51-BF843C72B45E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*","matchCriteriaId":"F7EF872D-2537-4FEB-8799-499FC9D44339"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.2.158","matchCriteriaId":"8EE6DCC3-C225-45A3-A6D0-52BA730EC285"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*","matchCriteriaId":"63500DE4-BDBD-4F86-AB99-7DB084D0B912"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.6.138","matchCriteriaId":"C706F152-6163-4276-B608-C4AF196E070F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*","matchCriteriaId":"58EB0F2F-FB5C-47D9-9AE6-087AE517B3F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.6.138","matchCriteriaId":"E301ACAC-E217-4329-8A32-83946E61999E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*","matchCriteriaId":"1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.6.138","matchCriteriaId":"F8028906-D5AB-4CE6-8431-844E6F98B9AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*","matchCriteriaId":"06B5A85C-3588-4263-B9AD-4E56D3F6CB16"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5.1.86","matchCriteriaId":"3BC7E8C9-62BD-45E2-8A7A-D29A6150622A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*","matchCriteriaId":"2700644E-0940-4D05-B3CA-904D91739E58"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.76","matchCriteriaId":"B98293B5-C804-4ED5-8344-12AA02E933CB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*","matchCriteriaId":"366FA778-3C2A-42AF-9141-DAD7043B406C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.44","matchCriteriaId":"B982B02E-52CA-4AEE-B2DB-3B7851469088"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*","matchCriteriaId":"1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.0.72","matchCriteriaId":"B5D8ED5C-AA45-41A5-B9BE-FBA3EECFCA09"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*","matchCriteriaId":"C8DE4BFA-41DE-4748-ACC7-14362333A059"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.3.72","matchCriteriaId":"004CA551-E868-447C-B853-3A13E5956C3B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*","matchCriteriaId":"5590CF28-B88A-4755-904B-1BC1778FBEDD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.64","matchCriteriaId":"1B3859B4-7910-4872-89BF-89423C9E988C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*","matchCriteriaId":"F87FFC46-137D-45B8-B437-F15565FB33D0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.80","matchCriteriaId":"00B1D5CE-C17F-43CF-9030-749CE89A7149"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*","matchCriteriaId":"F3EEA190-2E9C-4586-BF81-B115532FBA23"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.114","matchCriteriaId":"A5C80E07-CB90-4E73-9972-7F5CAABBF107"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*","matchCriteriaId":"7D30939B-86E3-4C78-9B05-686B4994C8B9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.96","matchCriteriaId":"E742DBED-D806-4667-BA89-EEA8F8C6F734"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*","matchCriteriaId":"CDAA5899-B73C-4690-853E-B5400F034BE1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.96","matchCriteriaId":"93528775-F1CD-4A31-A50F-EBECFFCD4BE7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*","matchCriteriaId":"CC5488D9-651C-4BAB-A141-06B816690D42"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.68","matchCriteriaId":"08B89143-A6F7-4181-A553-B2BACCE3723D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*","matchCriteriaId":"8C6DFDB6-1D7A-459A-8D30-FD4900ED718B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.48","matchCriteriaId":"05C15EB8-4B1F-4245-9498-F26EA7E912DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*","matchCriteriaId":"305E295C-9C73-4798-A0BE-7973E1EE5EAB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:d7000v2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.80","matchCriteriaId":"9808B932-6DDD-4119-9712-70C46644B3C0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:d7000v2:-:*:*:*:*:*:*:*","matchCriteriaId":"6DC6BD34-1A2C-4247-A20C-0B44C0F56E0F"}]}]}],"references":[{"url":"https://kb.netgear.com/000064720/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0323","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-519/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.netgear.com/000064720/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-519/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}