CVE-2022-27946

PoC —

CVSS 3.1

8.8 high

EPSS

3%p88

Published

Mar 26, 2022 (Mar 26, 2022)

Modified

Jun 17, 2026

Description

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.

Vendors: netgear
Products: r8500 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.