CVE-2022-31876

Description

netgear wnap320 router WNAP320_V2.0.3_firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• https://github.com/jayus0821/uai-poc/blob/main/Netgear/WNAP320/unauth.md
• https://www.netgear.com/about/security/
• https://github.com/jayus0821/uai-poc/blob/main/Netgear/WNAP320/unauth.md
• https://www.netgear.com/about/security/