CVE-2022-30079

HighCVSS 8.8

Published: 08/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

24.70%

98th percentile - higher than 98% of all known CVEs

Summary

A command injection vulnerability was discovered in Netgear R6200 v2 firmware up to version R6200v2-V1.0.3.12 in the binary /sbin/acos_service. It allows remote authenticated attackers to modify values in the vulnerable parameter.

Risk Assessment

An attacker can remotely execute arbitrary system commands on the router, leading to full device compromise and potential network takeover.

Recommendation

Immediately update the router firmware to the latest available version that fixes this vulnerability. If no update is available, consider replacing the device with a supported model.

Original NVD description (English source)

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.