CVE-2022-38458

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information.

CVSS v3.1

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.61% chance of exploitation in the next 30 days, 47th percentile

Published

2023-03-21

Updated

2025-02-26

Proof-of-concept exploits (1)

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1598

References

• CVE Record
• NVD entry

Related

• CVE-2022-38452
• CVE-2022-38459
• CVE-2022-38451
• CVE-2022-3846
• CVE-2022-3840
• CVE-2022-38463