Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution
Summary: Cisco Talos discovered four vulnerabilities in Netgear's Orbi mesh wireless system, including TALOS-2022-1596 (CVE-2022-37337) in the Orbi Satellite, which can lead to arbitrary command execution after the attacker authenticates to the mesh system and sends a specially crafted HTTP request. Two other flaws in the main Orbi router, TALOS-2022-1595 (CVE-2022-38452) and TALOS-2022-1597 (CVE-2022-36429), also allow arbitrary command execution via a crafted network request or JSON object, while TALOS-2022-1598 (CVE-2022-38458) lets an adversary conduct a man-in-the-middle attack to trick the Web Services Management tool into disclosing sensitive information.
What's compelling: Netgear has patches available for three of the four flaws, but is still developing a fix for TALOS-2022-1595, which Talos disclosed under its 90-day policy - leaving that command execution path open on affected Orbi routers in the meantime.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-36429CVE-2022-37337CVE-2022-38452CVE-2022-38458
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026