Cleartext Transmission Vulnerability in Netgear Orbi Router
CVE-2022-38458

6.5MEDIUM

Key Information:

Vendor
Netgear
Vendor
CVE Published:
21 March 2023

Summary

A vulnerability exists in the Remote Management functionality of the Netgear Orbi Router RBR750, specifically in version 4.6.8.5, leading to potential disclosure of sensitive information. This security issue arises from unencrypted information being transmitted over the network, making it susceptible to interception via a man-in-the-middle attack. As a result, attackers can exploit this weakness to capture sensitive data, threatening the security and privacy of users.

Affected Version(s)

Orbi Router RBR750 4.6.8.5

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.