CVE-2022-38452 — Hidden Functionality in Netgear Orbi Router Rbr750

CWE-912 — Hidden Functionality3 documents3 sources

Severity

8.8HIGHNVD

CNA7.2

EPSS

0.3%

top 44.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netgear Orbi Router Rbr750 Netgear Rbs750 Firmware

Timeline

PublishedMar 21

Description

A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5netgear/orbi_router_rbr7504.6.8.5

▶NVDnetgear/rbs750_firmware4.6.8.5

🔴Vulnerability Details

CVEList

CVE-2022-38452: A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4↗2023-03-21

▶

GHSA

GHSA-9468-42qx-67cg: A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4↗2023-03-21

▶