CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-47208

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.1%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2022-47208

Netgear » Nighthawk Ax11000 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax11000:-
Netgear » Nighthawk Ax1800 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax1800:-
Netgear » Nighthawk Ax2400 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax2400:-
Netgear » Nighthawk Ax3000 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax3000:-
Netgear » Nighthawk Ax5400 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax5400:-
Netgear » Nighthawk Ax6000 » Version: N/A

cpe:2.3:h:netgear:nighthawk_ax6000:-
Netgear » Nighthawk Ax11000 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax11000_firmware:-
Netgear » Nighthawk Ax1800 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax1800_firmware:-
Netgear » Nighthawk Ax2400 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax2400_firmware:-
Netgear » Nighthawk Ax3000 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax3000_firmware:-
Netgear » Nighthawk Ax5400 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax5400_firmware:-
Netgear » Nighthawk Ax6000 Firmware » Version: N/A

cpe:2.3:o:netgear:nighthawk_ax6000_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-47208

Products

Pricing

Contact Us