CVE-2022-47210

published 2022-12-16

CVE-2022-47210: The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	rax30_firmware	< 1.0.9.90	1.0.9.90

CWE-78 CWE-77