Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-37337 EUVD-2022-39971GHSA-hqcp-27rh-hjjg

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTT…

Published Mar 21, 2023 · Updated Feb 26, 2025 · Assigned by talos

Vendor: NETGEAR Product: Orbi Router RBR750 Category: Network devices

Description

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Netgear Orbi Router RBR750 4.6.8.5 —

References