Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/pwning-wd-nas-netgear-routers-and-overflowing-kernel-pages.html

Plenty of exploit strategy talk this week with vulnerabilities and complete exploits targeting a NAS, a router, and a Linux Kernel module with a page-level overflow.

[00:00:26] Spot the Vuln - Normalized Regex

[00:01:52] Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121)

[00:07:10] Defeating the Netgear R6700v3

[00:18:36] Exploit esp6 modules in Linux kernel [CVE-2022-27666]

[00:27:17] Racing against the clock -- hitting a tiny kernel race window

The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:

Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

Or follow us on Twitter (@dayzerosec) to know when new releases are coming.

[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages