Netgear Orbi routers vulnerable to command execution exploit and PoC attacks.

Netgear's Orbi mesh wireless system has critical vulnerabilities in older versions that can be exploited by hackers to remotely execute commands. Researchers on Cisco's Talos security team discovered four vulnerabilities last year, and the most severe of them, tracked as CVE-2022-37337, can be exploited by sending specially crafted HTTP requests to the device. Netgear released firmware updates in January that patched the vulnerability, but Talos has now published a proof-of-concept exploit code along with technical details, so users should ensure their Orbi routers are running the latest firmware.