CVE-2022-37337

CVSS V2 None CVSS V3 None
Description
A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Overview
  • CVE ID
  • CVE-2022-37337
  • Assigner
  • talos-cna@cisco.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-03-21T18:15:12
  • Last Modified Date
  • 2023-03-29T11:15:06
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:netgear:rbs750_firmware:4.6.8.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* 0 OR
History
Created Old Value New Value Data Type Notes
2023-04-17 03:03:56 Added to TrackCVE
2023-04-17 03:03:58 Weakness Enumeration new