Tag

Orbi

All articles tagged with #orbi

cybersecurity2 years ago

Netgear Orbi routers vulnerable to command execution exploit and PoC attacks.

Netgear's Orbi mesh wireless system has critical vulnerabilities in older versions that can be exploited by hackers to remotely execute commands. Researchers on Cisco's Talos security team discovered four vulnerabilities last year, and the most severe of them, tracked as CVE-2022-37337, can be exploited by sending specially crafted HTTP requests to the device. Netgear released firmware updates in January that patched the vulnerability, but Talos has now published a proof-of-concept exploit code along with technical details, so users should ensure their Orbi routers are running the latest firmware.

cybersecurity2 years ago

Netgear Orbi router vulnerabilities pose high-severity threat

Proof-of-concept exploits for vulnerabilities in Netgear’s Orbi 750 series router and extender satellites have been released, including a critical severity remote command execution bug. The flaws were discovered by the Cisco Talos team and reported to the vendor on August 30, 2022. Users are urged to update their firmware to the latest version, 4.6.14.3, released on January 19, 2023. The exploits require local access, valid login credentials, or the admin console to be publicly accessible, making it much harder to exploit the vulnerabilities.