Medium severity5.3NVD Advisory· Published Sep 20, 2022· Updated Jun 17, 2026

CVE-2022-38956

Description

An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.1_1.1.9 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Wpn824ext Firmware
cpe:2.3:o:netgear:wpn824ext_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.1_1.1.9
Netgear/WiFi range extenderscpe-rescue
Netgear/WPN824EXT WiFi Range Extenderllm-create
Range: <=1.1.1_1.1.9

Patches

Vulnerability mechanics

References

www.netgear.com/about/security/nvdVendor Advisory
hackmd.io/%40eupX2KdkT6iNpqJUWk9p4A/SyAnOSd1snvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000