Cleartext Transmission Vulnerability in Netgear Orbi Router
CVE-2022-38458
6.5MEDIUM
Summary
A vulnerability exists in the Remote Management functionality of the Netgear Orbi Router RBR750, specifically in version 4.6.8.5, leading to potential disclosure of sensitive information. This security issue arises from unencrypted information being transmitted over the network, making it susceptible to interception via a man-in-the-middle attack. As a result, attackers can exploit this weakness to capture sensitive data, threatening the security and privacy of users.
Affected Version(s)
Orbi Router RBR750 4.6.8.5
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved