CVE-2022-37337: OS Command Injection
A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-37337?
CVE-2022-37337 is a command execution vulnerability that exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5.
How severe is CVE-2022-37337?
CVE-2022-37337 has a severity rating of 8.8, which is considered critical.
How does CVE-2022-37337 occur?
CVE-2022-37337 can be triggered by a specially-crafted HTTP request that leads to arbitrary command execution.
Which software versions are affected by CVE-2022-37337?
Netgear Orbi Router RBR750 firmware version 4.6.8.5 is affected by CVE-2022-37337.
How can CVE-2022-37337 be fixed?
Update Netgear Orbi Router RBR750 firmware to a version that fixes CVE-2022-37337.