CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions do not appear to be applied to the WAN interface for IPv6. This allows arbitrary access to any services running on the device that may be inadvertently listening via IPv6, such as the SSH and Telnet servers spawned on ports 22 and 23 by default. This misconfiguration could allow an attacker to interact with services only intended to be accessible by clients on the local network.

• https://www.synacktiv.com/en/publications/cool-vulns-dont-live-long-netgear-and-pwn2own.htmlExploit, Patch, Third Party Advisory
• https://www.tenable.com/security/research/tra-2022-36%2C
• https://www.synacktiv.com/en/publications/cool-vulns-dont-live-long-netgear-and-pwn2own.htmlExploit, Patch, Third Party Advisory
• https://www.tenable.com/security/research/tra-2022-36%2C

Published

Dec 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43887 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vu…5.3
• CVE-2022-43889 IBM Security Verify Privilege On-Premises 11.5 could disclo…5.3
• CVE-2022-43890IBM Security Verify Privilege On-Premises 11.5 could disclos…7.5
• CVE-2022-43891 IBM Security Verify Privilege On-Premises 11.5 could allow …5.3
• CVE-2022-43892 IBM Security Verify Privilege On-Premises 11.5 does not val…5.3
• CVE-2022-43893 IBM Security Verify Privilege On-Premises 11.5 could allow …4.4
• CVE-2022-43900 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps…6.5
• CVE-2022-43901 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps…5.5
• CVE-2022-43902IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to…7.5
• CVE-2022-43903IBM Security Guardium 10.6, 11.3, and 11.4 could allow an au…6.5
• CVE-2022-43904IBM Security Guardium 11.3 and 11.4 could disclose sensitive…7.5
• CVE-2022-43906IBM Security Guardium 11.5 could disclose sensitive informat…5.3