Unscored CVE-2022-27945 EUVD-2022-32433GHSA-9729-7gh5-v22r

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters i…

Published Mar 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.

References

https://github.com/donothingme/VUL/blob/main/vul2/2.md