Description

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.7.2.26, and RBS50 before 2.7.4.26.

INFO

Published Date :

2026-01-28T00:00:00.000Z

Last Modified :

2026-01-29T18:52:26.839Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2022-40619 vulnerability.

Vendors Products
Netgear
  • R6230
  • R6230 Firmware
  • R6260
  • R6260 Firmware
  • R7000
  • R7000 Firmware
  • R8900
  • R8900 Firmware
  • R9000
  • R9000 Firmware
  • Rax120
  • Rax120 Firmware
  • Rax120v2
  • Rax120v2 Firmware
  • Rbr20
  • Rbr20 Firmware
  • Rbr50
  • Rbs20
  • Rbs20 Firmware
  • Rbs50
  • Xr300
  • Xr300 Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2022-40619.

URL Resource
https://kb.netgear.com/000065132/Security-Advisory-for-Vulnerabilities-in-FunJSQ-on-Some-Routers-and-Orbi-WiFi-Systems-PSV-2022-0117 cve-icon cve-icon
https://www.onekey.com/resource/security-advisory-netgear-routers-funjsq-vulnerabilities cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact