Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-47210

No fix known EPSS <1%CVSS 7.8

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

Published 2022-12-16 · CVE record · OSV

Products: netgear rax30_firmware