✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Update – Okta Confirmed Security Breach by LAPSUS$ Group

March 25, 2022
Rewterz

Rewterz Threat Alert – DoubleZero Wiper – Active IOCs

March 25, 2022

Rewterz Threat Advisory – Multiple NETGEAR R6700v3 Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2022-27644

NETGEAR R6700v3 could allow a remote attacker to execute arbitrary code on the system, caused by improper certificate validation in the downloading of files. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of root.

CVE-2022-27646

NETGEAR R6700v3 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the the circled daemon. By using a specialy-crafted circleinfo.txt file, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system.

CVE-2022-27647

NETGEAR R6700v3 could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a flaw in the handling of the name or email field provided to libreadycloud.so. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.

Impact

  • Code Execution
  • Buffer Overflow
  • Command Execution

Indicator Of Compromise

CVE

  • CVE-2022-27644
  • CVE-2022-27646
  • CVE-2022-27647

Affected Vendors

  • NETGEAR

Affected Products

  • NETGEAR R6700v3

Remediation

Refer to NETGEAR Security Advisory for patch, upgrade or suggested workaround information.

NETGEAR Security Advisory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo