Vulnerability record · CVE-2022-30078 · published 7 September 2022

CVE-2022-30078: Netgear r6200 firmware os command injection vulnerability

Netgear · R6200 Firmware

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.

8.8 CVSS 3.1 High EPSS 1.8% · top 21.3% CWE-78 · OS command injection

8.8CVSS 3.1 base score

1.8%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

4References, 2 tagged exploit

9 Jul 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

R6200 Firmware Netgear

R6300 Firmware Netgear

References

Link	Tags
https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30078/CVE-2022-30078.md	ExploitThird Party Advisory
https://www.netgear.com/about/security/	Vendor Advisory
https://github.com/10TG/vulnerabilities/blob/main/Netgear/CVE-2022-30078/CVE-2022-30078.md	ExploitThird Party Advisory
https://www.netgear.com/about/security/	Vendor Advisory

Track CVE-2022-30078 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2017-5521NETGEAR router web management password disclosure via recovery tokenMultiple NETGEAR router models expose the admin password through the web management server. When authentication is canceled and password recovery is …KEVEPSS 89%analysed17 Jan 2017 9.8CVE-2018-21162Netgear d6400 firmware os command injection vulnerabilityCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86,…EPSS 3.4%23 Apr 2020 9.8CVE-2018-21134Netgear r6700 firmware out-of-bounds write vulnerabilityCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 befor…EPSS 1.3%23 Apr 2020 9.8CVE-2019-20730Netgear d3600 firmware sql injection vulnerabilityCertain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200 before 1.1.00.28, D6220 befor…EPSS 0.91%16 Apr 2020 8.8CVE-2021-27239Netgear d6220 firmware stack-based buffer overflow vulnerabilityThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version …EPSS 0.74%29 Mar 2021 8.8CVE-2018-21093Netgear d8500 firmware out-of-bounds write vulnerabilityCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 befo…EPSS 0.63%27 Apr 2020 8.8CVE-2017-18732Netgear r6300 firmware improper authentication vulnerabilityCertain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1…EPSS 0.79%23 Apr 2020 8.8CVE-2017-18744Netgear r6250 firmware classic buffer overflow vulnerabilityCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12…EPSS 0.57%23 Apr 2020

Source: NIST National Vulnerability Database (record CVE-2022-30078), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.