Ex6120
Monthly
Session hijacking on NETGEAR EX3700 and EX6120 WiFi extenders allows a network-adjacent attacker who already holds valid WiFi/network credentials to predict valid session identifiers and take over an administrator's live web management session (CWE-335). Rated Medium by the vendor with a CVSS 4.0 score of 4.5, and assessed as CVSS 3.1 AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - successful hijack grants full confidentiality and integrity impact over the portal but not availability. The attack is not internet-exploitable, requires a concurrent authenticated admin session and stays limited to these two extender models, and there is no public exploit identified at time of analysis; NETGEAR has published patched firmware for both products.
System integrity tampering across a broad portfolio of NETGEAR home and small-business networking devices allows authenticated administrators on the local network to manipulate device configuration beyond intended boundaries, classified under CWE-15 (External Control of System or Configuration Setting). The CVSS 4.0 vector (AV:A/PR:H/VI:H) confirms that exploitation is constrained to adjacent network access with high-privilege credentials, yet the integrity impact on the vulnerable system is rated High. No public exploit code exists (SSVC: Exploitation none; CVSS E:U), and NETGEAR has released firmware patches for all affected product lines.
Insufficient input validation across 30+ NETGEAR router, range extender, and mesh networking models enables local network-adjacent modification of router software and functionality. The CVSS 4.0 vector assigns PR:N (no privileges required) and AV:A (adjacent network), yet the CVE description scopes the vulnerability to 'authenticated administrators' - the 'Authentication Bypass' tag supplied by NETGEAR suggests the input validation flaw may itself circumvent authentication controls, reconciling this apparent conflict. Integrity impact is rated High (VI:H) against the vulnerable system, meaning successful exploitation allows unauthorized firmware or configuration modification. No public exploit is identified at time of analysis (E:U), and this CVE is not listed in the CISA KEV catalog.
Session hijacking on NETGEAR EX3700 and EX6120 WiFi extenders allows a network-adjacent attacker who already holds valid WiFi/network credentials to predict valid session identifiers and take over an administrator's live web management session (CWE-335). Rated Medium by the vendor with a CVSS 4.0 score of 4.5, and assessed as CVSS 3.1 AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - successful hijack grants full confidentiality and integrity impact over the portal but not availability. The attack is not internet-exploitable, requires a concurrent authenticated admin session and stays limited to these two extender models, and there is no public exploit identified at time of analysis; NETGEAR has published patched firmware for both products.
System integrity tampering across a broad portfolio of NETGEAR home and small-business networking devices allows authenticated administrators on the local network to manipulate device configuration beyond intended boundaries, classified under CWE-15 (External Control of System or Configuration Setting). The CVSS 4.0 vector (AV:A/PR:H/VI:H) confirms that exploitation is constrained to adjacent network access with high-privilege credentials, yet the integrity impact on the vulnerable system is rated High. No public exploit code exists (SSVC: Exploitation none; CVSS E:U), and NETGEAR has released firmware patches for all affected product lines.
Insufficient input validation across 30+ NETGEAR router, range extender, and mesh networking models enables local network-adjacent modification of router software and functionality. The CVSS 4.0 vector assigns PR:N (no privileges required) and AV:A (adjacent network), yet the CVE description scopes the vulnerability to 'authenticated administrators' - the 'Authentication Bypass' tag supplied by NETGEAR suggests the input validation flaw may itself circumvent authentication controls, reconciling this apparent conflict. Integrity impact is rated High (VI:H) against the vulnerable system, meaning successful exploitation allows unauthorized firmware or configuration modification. No public exploit is identified at time of analysis (E:U), and this CVE is not listed in the CISA KEV catalog.