PT-2023-13606 · NetGear · Netgear Orbi Router Rbr750

Dave Mcdaniel · CVE-2022-38458 · Published 2023-03-21 · Updated 2023-03-28

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear Orbi Router RBR750 version 4.6.8.5

Description A cleartext transmission issue exists in the Remote Management functionality. This can be exploited by a specially-crafted man-in-the-middle attack, potentially leading to the disclosure of sensitive information.

Recommendations For Netgear Orbi Router RBR750 version 4.6.8.5, consider disabling the Remote Management functionality until a patch is available to prevent exploitation.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-319

CWE-311

Related Identifiers

CVE-2022-38458

Affected Products

Netgear Orbi Router Rbr750

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1598 · Exploit
• https://osv.dev/vulnerability/CVE-2022-38458 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38458 · Security Note
• https://t.me/true_secator/4198 · Telegram Post
• https://t.me/cvenotify/46571 · Telegram Post
• https://kb.netgear.com/000065428/Security-Advisory-for-Cleartext-Transmission-on-Some-Orbi-WiFi-Systems-PSV-2022-0189 · Note
• https://t.me/cibsecurity/60401 · Telegram Post
• https://t.me/cvenotify/46557 · Telegram Post