CVE-2022-38955: NETGEAR WPN824EXT Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce a backdoor to the device or make the device DoS. This affects Firmware Version: 1.1.1_1.1.9.

Affected products

• NETGEAR WPN824EXT Firmware: version 1.1.1_1.1.9 only

Published 2022-09-20. Last modified 2026-06-17.