← Database

CVE-2022-27945

HIGH CVSS: 8.8 Published: 2022-03-26 Modified: 2026-06-17

Description

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.

Affected Platforms

Netgear R8500Netgear R8500 Firmware

Weakness Type

CWE-78

References