CVE-2022-38458CWE-311

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5

Medium · published March 21, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.8th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2023-03-21T17:41Z
EPSS history
Timeline
  • 21 MAR 17:41Z
    A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5
    cvelistv5