CVE-2022-37337 CRITICAL

CVE-2022-37337

Vendor Netgear
Product Orbi Router RBR750
Weakness CWE-78
Published March 21, 2023
Last update February 26, 2025
View on NVD All CVEs

CVSS base score

9.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Key dates

02Disclosure timeline

March 21, 2023 CVE published
February 26, 2025 Record updated