Command Injection in NETGEAR Routers and WiFi Systems

Published: 2023-03-16

Risk	Low
Patch available	YES
Number of vulnerabilities	1
CVE-ID	N/A
CWE-ID	CWE-77
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	CBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc LAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc MK62 Hardware solutions / Routers & switches, VoIP, GSM, etc MR60 Hardware solutions / Routers & switches, VoIP, GSM, etc MS60 Hardware solutions / Routers & switches, VoIP, GSM, etc MK83 Hardware solutions / Routers & switches, VoIP, GSM, etc MR80 Hardware solutions / Routers & switches, VoIP, GSM, etc MS80 Hardware solutions / Routers & switches, VoIP, GSM, etc NBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc R7960P Hardware solutions / Routers & switches, VoIP, GSM, etc R8000P Hardware solutions / Routers & switches, VoIP, GSM, etc RAX15 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX200 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX38v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX42 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX48 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50S Hardware solutions / Routers & switches, VoIP, GSM, etc RAX75 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX80 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE450 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE500 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK752 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK852 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBKE962 Hardware solutions / Routers & switches, VoIP, GSM, etc RBRE960 Hardware solutions / Routers & switches, VoIP, GSM, etc RBSE960 Hardware solutions / Routers & switches, VoIP, GSM, etc XR1000 Hardware solutions / Routers for home users
Vendor

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Command Injection

EUVDB-ID: #VU73743

Risk: Low

CVSSv3.1:

CVE-ID: N/A

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote user to execute arbitrary commands on the target system.

The vulnerability exists due to improper input validation. A remote administrator can pass specially crafted data to the application and execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

CBR750: before 4.6.14.4

LAX20: before 1.1.6.30

MK62: before 1.1.6.122

MR60: before 1.1.6.122

MS60: before 1.1.6.122

MK83: before 1.1.6.14

MR80: before 1.1.6.14

MS80: before 1.1.6.14

NBR750: before 4.6.5.11

R7960P: before 1.4.4.94

R8000P: before 1.4.4.94

RAX15: before 1.0.10.110

RAX20: before 1.0.10.110

RAX200: before 1.0.6.138

RAX35v2: before 1.0.4.100

RAX38v2: before 1.0.4.100

RAX40v2: before 1.0.4.100

RAX42: before 1.0.4.100

RAX43: before 1.0.4.100

RAX45: before 1.0.4.100

RAX48: before 1.0.4.100

RAX50: before 1.0.4.100

RAX50S: before 1.0.4.100

RAX75: before 1.0.6.138

RAX80: before 1.0.6.138

RAXE450: before 1.0.8.70

RAXE500: before 1.0.8.70

RBK752: before 4.6.7.13

RBR750: before 4.6.7.13

RBS750: before 4.6.7.13

RBK840: before 4.6.7.13

RBR840: before 4.6.7.13

RBS840: before 4.6.7.13

RBK852: before 4.6.7.13

RBR850: before 4.6.7.13

RBS850: before 4.6.7.13

RBKE962: before 6.0.3.68

RBRE960: before 6.0.3.68

RBSE960: before 6.0.3.68

XR1000: before 1.0.0.64

Fixed software versions

CPE2.3

cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*

External links

http://kb.netgear.com/000065574/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2021-0182

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?