CVE-2022-27945

2022-03-2616:13:33

mitre

www.cve.org

netgear

r8500

remote execution

authenticated users

arbitrary commands

shell metacharacters

sysnewpasswd

sysconfirmpasswd

password.cgi

AI Score

Confidence

High

EPSS

0.004

Percentile

72.8%

JSON

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.

References

github.com/donothingme/VUL/blob/main/vul2/2.md