7.8
High
CVE-2022-47210 The default console presented to users over telnet (when enabled) is restricted to a subset of commands
Description
The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NETGEAR Nighthawk WiFi6 Router | Versions not published |
Other CVEs of NETGEAR Nighthawk WiFi6 Router
The 8 CVEs of NETGEAR Nighthawk WiFi6 Router →
CVE-2023-1205
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all…
8.8
High
CVE-2023-27850
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to…
Not rated
CVE-2023-27851
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users…
8.8
High
CVE-2023-27852
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms…
9.8
Critical