Command Execution Vulnerability in Netgear Orbi Router

CVE-2022-37337

Summary

A command execution vulnerability exists within the access control functionality of the Netgear Orbi Router RBR750 version 4.6.8.5. By sending a specially-crafted HTTP request, an attacker can achieve arbitrary command execution on the device. This could allow unauthorized commands to be executed, posing significant security risks. Authenticated users may inadvertently trigger this vulnerability, emphasizing the need for proactive security measures. It is important for users to review the security advisory and apply necessary updates to mitigate this vulnerability.

References