CVE-2022-37337

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2022-37337

CVE-2022-37337 affects Netgear Orbi Router RBR750 (and related satellites) with a command-injection in the access-control/web services surface. The root cause is input handling in the device’s HTTP/web-UI logic allowing an authenticated attacker to craft requests that execute arbitrary commands w...

Netgear Orbi Router RBR750 access control command execution vulnerability

Talos Vulnerability Report TALOS-2022-1596 Netgear Orbi Router RBR750 access control command execution vulnerability March 21, 2023 CVE Number CVE-2022-37337 SUMMARY A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A...