Skip to content
Fencer Vulns
high 7.4

CVE-2023-23110 json

An exploitable firmware modification vulnerability was discovered in certain Netgear products.

published 2023-02-02 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27210

cvss
7.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 47%
public exploits
0
none known

Summary

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
19 mo ago

Exploit prediction

0.57% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco referenced PoC, tagged "exploit" by a source, unverified
  • hackmd.io https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CNA 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Classification

Weakness
  • CWE-494 Download of Code Without Integrity Check

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.