CVE-2022-24655: NETGEAR CAX80 Firmware

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.

Affected products

• NETGEAR CAX80 Firmware: version 2.1.2.6 only
• NETGEAR DC112A Firmware: version 1.0.0.62 only
• NETGEAR EX6100 Firmware: version 201.0.2.28 only
• NETGEAR EX6200 Firmware: any version

Published 2022-03-18. Last modified 2026-06-17.