CVE-2022-40619

HIGH EPSS 80.6%
Published Jan 28, 20265mo ago · Modified Jun 17, 20261w ago
7.7 CVSS 3.1
High
Find Similar
Published Jan 28, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.7.2.26, and RBS50 before 2.7.4.26.

CVSS Details

Base Score
7.7
Exploitability
2.2
Impact
5.5
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability Low

Threat Intelligence

EPSS Exploit Probability
80.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-77 Command Injection Injection

Affected Products 20

VendorProductVersionRange
netgearrbr20_firmware* <2.7.2.26
netgearrbr20*any
netgearr6230_firmware* <1.1.0.112
netgearr6230*any
netgearr6260_firmware* <1.1.0.88
netgearr6260*any
netgearr7000_firmware* <1.0.11.134
netgearr7000*any
netgearr8900_firmware* <1.0.5.42
netgearr8900*any
netgearr9000_firmware* <1.0.5.42
netgearr9000*any
netgearrax120_firmware* <1.2.8.40
netgearrax120*any
netgearrax120v2_firmware* <1.2.8.40
netgearrax120v2*any
netgearxr300_firmware* <1.0.3.72
netgearxr300*any
netgearrbs20_firmware* <2.7.2.26
netgearrbs20*any

References 2

  • kb.netgear.com https://kb.netgear.com/000065132/Security-Advisory-for-Vulnerabilities-in-FunJSQ-on-Some-Routers-and-Orbi-WiFi-Systems-PSV-2022-0117
    Vendor Advisory
  • onekey.com https://www.onekey.com/resource/security-advisory-netgear-routers-funjsq-vulnerabilities
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.