PT-2023-13606 · NetGear · Netgear Orbi Router Rbr750

Dave Mcdaniel · Publicado 2023-03-21 · Atualizado 2023-03-28 · CVE-2022-38458

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear Orbi Router RBR750 version 4.6.8.5

Description A cleartext transmission issue exists in the Remote Management functionality. This can be exploited by a specially-crafted man-in-the-middle attack, potentially leading to the disclosure of sensitive information.

Recommendations For Netgear Orbi Router RBR750 version 4.6.8.5, consider disabling the Remote Management functionality until a patch is available to prevent exploitation.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-319

CWE-311

Identificadores relacionados

CVE-2022-38458

Produtos afetados

Netgear Orbi Router Rbr750

Referências · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1598 · Exploit
• https://t.me/true_secator/4198 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-38458 · Aviso do Fabricante
• https://t.me/cvenotify/46571 · Publicação no Telegram
• https://kb.netgear.com/000065428/Security-Advisory-for-Cleartext-Transmission-on-Some-Orbi-WiFi-Systems-PSV-2022-0189 · Nota
• https://t.me/cibsecurity/60401 · Publicação no Telegram
• https://t.me/cvenotify/46557 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-38458 · Nota de Segurança