CVE-2022-38458

MEDIUM

Netgear Orbi Router RBR750 4.6.8.5 - Info Disclosure

Title source: llm

Description

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information.

References (3)

[Various Sources] https://kb.netgear.com/000065428/Security-Advisory-for-Cleartext-Transmission-on-Some-Orbi-WiFi-Systems-PSV-2022-0189

[Exploit, Third Party Advisory] https://talosintelligence.com/vulnerability_reports/TALOS-2022-1598

[Third Party Advisory] https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1598

Scores

CVSS v3 6.5

EPSS 0.0028

EPSS Percentile 51.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-319 CWE-311

Status published

Products (1)

netgear/rbs750_firmware 4.6.8.5

Published Mar 21, 2023

Tracked Since Feb 18, 2026