CVE-2022-27946

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd…

published March 26, 2022

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03247 · 88.2th percentile
Published
2022-03-26T16:14Z
EPSS history
Timeline
  • 26 MAR 16:14Z
    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd…
    cvelistv5