CVE-2022-30078: NETGEAR r6200 Firmware

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.

Affected products

• NETGEAR r6200 Firmware: up to and including 1.0.3.12_10.1.11
• NETGEAR r6300 Firmware: up to and including 1.0.4.52_10.0.93

Published 2022-09-07. Last modified 2026-07-09.