CVE-2022-46424: NETGEAR XWN5001 Firmware

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.

Affected products

• NETGEAR XWN5001 Firmware: up to and including 0.4.1.1

Published 2022-12-20. Last modified 2026-06-17.