An information disclosure vulnerability in NETGEAR Orbi satellite devices enables a local network user to obtain administrative privileges on the Orbi router. The flaw would expose internal configuration data that grants control over the router’s settings, potentially allowing full network management. This discriminatory access undermines confidentiality and integrity of the network configuration.

The affected devices include NETGEAR routers RBE97x, RBR350, RBR760, RBS350, and RBS760 models that are part of the Orbi satellite family. Firmware versions prior to V6.3.8.11 (for RBE97x, RBR760, RBS760) and V4.4.2.2 (for RBR350, RBS350) are vulnerable. Models without satellite devices are not impacted.

The CVSS score of 4.2 indicates a moderate risk profile. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local network or user‑connected, as the description specifies a user connected to your network could exploit it. No remote exploitation pathway is documented, so external threat is limited.