01 Record

CVE-2023-23110

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an

HighPUBLISHEDCNA: mitre

CNA base score7.4 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

View raw JSON

02 Description

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.57% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 45.0% of scored records. A rank, not a probability.

NVD base score

7.4 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2023-02-02 00:00Z3 YR AGO

Last updated

2025-03-26 20:39Z1 YR AGO

Reserved

2023-01-11

Assigning CNA

mitre

Record state

PUBLISHED

Severity

High (CVSS 7.4)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses

CWE-494Download of Code Without Integrity CheckBase

Data version

5.1

Document digest

13e65e671b511c3aded17836a3af691668eb371f0df1bd1c93ca62ccbf6a3c07

05 Affected products

VendorProductVersionsPlatforms

netgeard6100Not specified—

netgeard6100_firmwareNot specified—

netgeardgn1000v3Not specified—

netgeardgn1000v3_firmwareNot specified—

netgearr8900Not specified—

netgearr8900_firmwareNot specified—

netgearr9000Not specified—

netgearr9000_firmwareNot specified—

netgearwnr1000v2Not specified—

netgearwnr1000v2_firmwareNot specified—

netgearwnr2200Not specified—

netgearwnr2200_firmwareNot specified—

netgearwnr2500Not specified—

netgearwnr2500_firmwareNot specified—

netgearwnr612v2Not specified—

netgearwnr612v2_firmwareNot specified—

netgearxavn2001v2Not specified—

netgearxavn2001v2_firmwareNot specified—

06 References

www.netgear.comhttps://www.netgear.com/about/security/
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco
hackmd.iohttps://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o

01 Record index

CVE-2023-23110

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-23110

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References