CVE-2022-38452

PoC —

CVSS 3.1

8.8 high

EPSS

2%p81

Published

Mar 21, 2023 (Mar 21, 2023)

Modified

Jun 17, 2026

Description

A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability.

Vendors: netgear
Products: rbs750 firmware
Weakness: CWE-912
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news2 stories

Experts released PoC exploits for bugs in Netgear Orbi routers

Security AffairsMar 22, 18:15 UTC · Mar 22, 2023Exploit / PoC in the wildCVE-2022-37337 CVE-2022-38452 CVE-2022-36429+1 CVEs

Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution

Cisco TalosMar 21, 17:50 UTC · Mar 21, 2023Vulnerability in the wildCVE-2022-37337 CVE-2022-38452 CVE-2022-36429+1 CVEs