Skip to content
OpenAdvisories
High · 7.8 CVE-2022-47210 EUVD-2022-49985GHSA-6mx5-j85j-5862

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, h…

Published Dec 16, 2022 · Updated Apr 17, 2025 · Assigned by tenable

Description

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

Affected products

VendorProductAffectedFixed
— NETGEAR Nighthawk WiFi6 Router NETGEAR Nighthawk WiFi6 Router prior to V1.0.9.90 —

References