Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-23110 Details

Description

An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.4 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

CNA: CISA-ADPCVSS-B:7.4 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj	CVE	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o	CVE	ExploitThird Party Advisory
https://www.netgear.com/about/security/	CVE	Vendor Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj	[email protected]	ExploitThird Party Advisory
https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o	[email protected]	ExploitThird Party Advisory
https://www.netgear.com/about/security/	[email protected]	Vendor Advisory

see all 20 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-494	Download of Code Without Integrity Check	[email protected]
CWE-494	Download of Code Without Integrity Check	CISA-ADP

Affected Products

Product	Versions
netgear wnr612v2 firmware	<= 1.0.0.3
CPE cpe:2.3:o:netgear:wnr612v2_firmware:::::::: Remediation No remediation found in references.
netgear wnr612v2	All versions
CPE cpe:2.3:h:netgear:wnr612v2:-:::::::* Remediation No remediation found in references.
netgear dgn1000v3 firmware	<= 1.0.0.22
CPE cpe:2.3:o:netgear:dgn1000v3_firmware:::::::: Remediation No remediation found in references.
netgear dgn1000v3	All versions
CPE cpe:2.3:h:netgear:dgn1000v3:-:::::::* Remediation No remediation found in references.
netgear d6100 firmware	<= 1.0.0.63
CPE cpe:2.3:o:netgear:d6100_firmware:::::::: Remediation No remediation found in references.
netgear d6100	All versions
CPE cpe:2.3:h:netgear:d6100:-:::::::* Remediation No remediation found in references.
netgear wnr1000v2 firmware	<= 1.1.2.60
CPE cpe:2.3:o:netgear:wnr1000v2_firmware:::::::: Remediation No remediation found in references.
netgear wnr1000v2	All versions
CPE cpe:2.3:h:netgear:wnr1000v2:-:::::::* Remediation No remediation found in references.
netgear xavn2001v2 firmware	<= 0.4.0.7
CPE cpe:2.3:o:netgear:xavn2001v2_firmware:::::::: Remediation No remediation found in references.
netgear xavn2001v2	All versions
CPE cpe:2.3:h:netgear:xavn2001v2:-:::::::* Remediation No remediation found in references.
netgear wnr2200 firmware	<= 1.0.1.102
CPE cpe:2.3:o:netgear:wnr2200_firmware:::::::: Remediation No remediation found in references.
netgear wnr2200	All versions
CPE cpe:2.3:h:netgear:wnr2200:-:::::::* Remediation No remediation found in references.
netgear wnr2500 firmware	<= 1.0.0.34
CPE cpe:2.3:o:netgear:wnr2500_firmware:::::::: Remediation No remediation found in references.
netgear wnr2500	All versions
CPE cpe:2.3:h:netgear:wnr2500:-:::::::* Remediation No remediation found in references.
netgear r8900 firmware	<= 1.0.3.6
CPE cpe:2.3:o:netgear:r8900_firmware:::::::: Remediation No remediation found in references.
netgear r8900	All versions
CPE cpe:2.3:h:netgear:r8900:-:::::::* Remediation No remediation found in references.
netgear r9000 firmware	<= 1.0.3.6
CPE cpe:2.3:o:netgear:r9000_firmware:::::::: Remediation No remediation found in references.
netgear r9000	All versions
CPE cpe:2.3:h:netgear:r9000:-:::::::* Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Mar 26, 2025	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 9, 2023	Initial Analysis	[email protected]
Feb 3, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]

CVE-2023-23110 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO