CRITICAL
A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5
Published Mar 21, 2023
9.1
CRITICALCVSS 3.1
EPSS 2.83%
Description
A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected products
-
- Version 4.6.8.5StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| NETGEAR | Orbi Router RBR750 | n/a |
|
AND
- 4.6.8.5
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-39971 Advisory
- https://kb.netgear.com/000065417/Security-Advisory-for-Command-Injection-on-Some-Orbi-WiFi-Systems-PSV-2022-0187
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1596 ExploitThird Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1596
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner talos
Published Mar 21, 2023
Updated Feb 26, 2025
Reserved Aug 23, 2022
Link CVE-2022-37337
CISA Vulnrichment
Updated Feb 26, 2025
ENISA EUVD
EUVD-2022-39971 Assigner talos
Published Mar 21, 2023
Updated Feb 26, 2025
Exploited since n/a
Link EUVD-2022-39971