CVE-2022-48176: NETGEAR MR60 Firmware

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.

Affected products

• NETGEAR MR60 Firmware: before 1.1.7.132 (fixed in 1.1.7.132)
• NETGEAR MS60 Firmware: before 1.1.7.132 (fixed in 1.1.7.132)
• NETGEAR r6900p Firmware: before 1.3.3.154 (fixed in 1.3.3.154)
• NETGEAR r7000p Firmware: before 1.3.3.154 (fixed in 1.3.3.154)
• NETGEAR r7960p Firmware: before 1.4.4.94 (fixed in 1.4.4.94)
• NETGEAR r8000p Firmware: before 1.4.4.94 (fixed in 1.4.4.94)

Published 2023-01-31. Last modified 2026-06-17.