CVE-2022-38458 — Missing Encryption of Sensitive Data in Netgear Orbi Router Rbr750

CWE-311 — Missing Encryption of Sensitive DataCWE-319 — Cleartext Transmission of Sensitive Info3 documents3 sources
Severity
5.9MEDIUMNVD
CNA6.5
EPSS
0.3%
top 48.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Netgear Orbi Router Rbr750Netgear Rbs750 Firmware
Timeline
PublishedMar 21

Description

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netgear/orbi_router_rbr7504.6.8.5

🔴Vulnerability Details

2
CVEList
CVE-2022-38458: A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4↗2023-03-21
▶
GHSA
GHSA-6rp4-vqhc-69xf: A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4↗2023-03-21
▶
CVE-2022-38458 — Missing Encryption of Sensitive Data | cvebase