Lucene search
HistoryDec 16, 2022 - 8:15 p.m.
CVE-2022-47209
cve-2022-47209
backdoor account
technical support
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
40.4%
A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means.
Affected configurations
Node
netgearrax30Match-
netgearrax30_firmwareRange<1.0.9.90
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netgear | rax30 | - | cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:* |
| netgear | rax30_firmware | * | cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-47209
2022-12-16 00:00:00
prion
prion
Default credentials
2022-12-16 20:15:00
cve
cve
CVE-2022-47209
2022-12-16 20:15:08
CVSS3
8.8
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
40.4%
Related for NVD:CVE-2022-47209