CVE-2022-40619

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...

VulnCheck KEV: CVE-2022-40619

A vulnerability is present in a third party module named FunJSQ, integrated on some routers and Orbi WiFi Systems. Exploitation requires an attacker to have your WiFi password or an Ethernet connection to your router...

PT-2022-25420

Name of the Vulnerable Software and Affected Versions NETGEAR routers and Orbi WiFi Systems versions prior to 1.1.0.112 NETGEAR R6260 versions prior to 1.1.0.88 NETGEAR R7000 versions prior to 1.0.11.134 NETGEAR R8900 versions prior to 1.0.5.42 NETGEAR R9000 versions prior to 1.0.5.42 NETGEAR XR3...