CVE-2022-30079: NETGEAR r6200

High severity, CVSS 8.8. EPSS: 25.2% chance of exploitation in the next 30 days.

Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.

Affected products

• NETGEAR r6200: version r6200v2-v1.0.3.12 only

Published 2022-09-08. Last modified 2026-07-09.