CVE-2022-47210: The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be…

PriorityP343high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.40%

32.4th percentile

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	rax30_firmware	< 1.0.9.90	1.0.9.90

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.