CVE-2022-38458

PoC —

CVSS 3.1

5.9 medium

EPSS

<1%p48

Published

Mar 21, 2023 (Mar 21, 2023)

Modified

Jun 17, 2026

Description

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information.

Vendors: netgear
Products: rbs750 firmware
Weakness: CWE-311, CWE-319
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Experts released PoC exploits for bugs in Netgear Orbi routers

Security AffairsMar 22, 18:15 UTC · Mar 22, 2023Exploit / PoC in the wildCVE-2022-37337 CVE-2022-38452 CVE-2022-36429+1 CVEs

Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution

Cisco TalosMar 21, 17:50 UTC · Mar 21, 2023Vulnerability in the wildCVE-2022-37337 CVE-2022-38452 CVE-2022-36429+1 CVEs