6.4

CVE-2026-0409

Netgear Orbi 370 Series Remote Code Execution vulnerability

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Rbe370 Firmware Version < 12.1.2.7
   Netgear ≫ Rbe370 Version-
Netgear ≫ Rbe371 Firmware Version < 12.1.2.7
   Netgear ≫ Rbe371 Version-
Netgear ≫ Rbe372 Firmware Version < 12.1.2.7
   Netgear ≫ Rbe372 Version-
Netgear ≫ Rbe374 Firmware Version < 12.1.2.7
   Netgear ≫ Rbe374 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.167
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 0.5 5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
NETGEAR 4.8 0 0
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.netgear.com/support/product/rbe372/
Product
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Vendor Advisory