CVE-2022-37337 — OS Command Injection in Netgear Orbi Router Rbr750

CWE-78 — OS Command Injection5 documents4 sources
Severity
8.8HIGHNVD
CNA9.1
EPSS
0.7%
top 28.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Netgear Orbi Router Rbr750Netgear Rbs750 Firmware
Timeline
PublishedMar 21

Description

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5netgear/orbi_router_rbr7504.6.8.5

🔴Vulnerability Details

2
CVEList
CVE-2022-37337: A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4↗2023-03-21
▶
GHSA
GHSA-hqcp-27rh-hjjg: A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4↗2023-03-21
▶
CVE-2022-37337 — OS Command Injection in Netgear | cvebase