Netgear Orbi router vulnerabilities pose high-severity threat

Proof-of-concept exploits for vulnerabilities in Netgear’s Orbi 750 series router and extender satellites have been released, including a critical severity remote command execution bug. The flaws were discovered by the Cisco Talos team and reported to the vendor on August 30, 2022. Users are urged to update their firmware to the latest version, 4.6.14.3, released on January 19, 2023. The exploits require local access, valid login credentials, or the admin console to be publicly accessible, making it much harder to exploit the vulnerabilities.