Command Injection Vulnerability in Netgear R6220 Router
CVE-2022-42221
8.8HIGH
Summary
The Netgear R6220 Router is exposed to a command injection vulnerability due to incorrect access controls in its handling of requests. This flaw allows attackers to execute arbitrary commands on the device with potentially severe implications for network security. By exploiting this vulnerability, unauthorized users can gain access to sensitive functionalities and systems, underscoring the necessity of prompt updates and active vulnerability management.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved