CVE-2022-40620: NETGEAR R6230 Firmware vulnerability (CVSS 7.7)

Description

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker (suitably positioned on the network) could intercept the update request and deliver a malicious update package in order to gain arbitrary code execution on affected devices. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.7.2.26, and RBS50 before 2.7.4.26.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityLow

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected products

NETGEAR R6230 Firmware< 1.1.0.112

NETGEAR R6260 Firmware< 1.1.0.88

NETGEAR R7000 Firmware< 1.0.11.134

NETGEAR R8900 Firmware< 1.0.5.42

NETGEAR R9000 Firmware< 1.0.5.42

NETGEAR Rax120 Firmware< 1.2.8.40

NETGEAR Rax120v2 Firmware< 1.2.8.40

NETGEAR Rbr20 Firmware< 2.7.2.26

NETGEAR Rbs20 Firmware< 2.7.2.26

NETGEAR Xr300 Firmware< 1.0.3.72

Remediation

Fixed in

NETGEAR R6230 Firmware≥ 1.1.0.112

NETGEAR R6260 Firmware≥ 1.1.0.88

NETGEAR R7000 Firmware≥ 1.0.11.134

NETGEAR R8900 Firmware≥ 1.0.5.42

NETGEAR R9000 Firmware≥ 1.0.5.42

NETGEAR Rax120 Firmware≥ 1.2.8.40

NETGEAR Rax120v2 Firmware≥ 1.2.8.40

NETGEAR Rbr20 Firmware≥ 2.7.2.26

NETGEAR Rbs20 Firmware≥ 2.7.2.26

NETGEAR Xr300 Firmware≥ 1.0.3.72

Patch & vendor advisories

https://kb.netgear.com/000065132/Security-Advisory-for-Vulnerabilities-in-FunJSQ-on-Some-Routers-and-Orbi-WiFi-Systems-PSV-2022-0117

References

https://kb.netgear.com/000065132/Security-Advisory-for-Vulnerabilities-in-FunJSQ-on-Some-Routers-and-Orbi-WiFi-Systems-PSV-2022-0117Vendor Advisory
https://www.onekey.com/resource/security-advisory-netgear-routers-funjsq-vulnerabilitiesExploitThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2022-40620 being actively exploited?

CVE-2022-40620 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.30%.

How severe is CVE-2022-40620?

CVE-2022-40620 has a CVSS 3.1 base score of 7.7, rated high. EPSS estimates a 0.30% probability of exploitation.

Which products are affected by CVE-2022-40620?

Affected products include NETGEAR R6230 Firmware, NETGEAR R6260 Firmware, NETGEAR R7000 Firmware, NETGEAR R8900 Firmware, NETGEAR R9000 Firmware, and 5 more.

How do I fix CVE-2022-40620?

Upgrade affected software to a fixed version, for example NETGEAR R6230 Firmware 1.1.0.112, NETGEAR R6260 Firmware 1.1.0.88, NETGEAR R7000 Firmware 1.0.11.134 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2022-40620 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo