CVE-2022-27946

8.8 highEPSS 3.2%

High (8.8) in netgear r8500 firmware. EPSS 3.2% chance of exploitation in the next 30 days.

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netgear:r8500_firmware

References

https://github.com/donothingme/VUL/blob/main/vul3/3.md
https://github.com/donothingme/VUL/blob/main/vul3/3.md

Check your stack JSON