Command Injection in NETGEAR Routers
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | N/A |
| CWE-ID | CWE-77 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
C7000v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX42 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX48 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50S Hardware solutions / Routers & switches, VoIP, GSM, etc RAX38v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc CAX80 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE500 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE450 Hardware solutions / Routers & switches, VoIP, GSM, etc |
| Vendor | NETGEAR |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Command Injection
EUVDB-ID: #VU77788
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: N/A
CWE-ID:
CWE-77 - Command injection
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation. An attacker with physical access can pass specially crafted data to the application and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsC7000v2: All versions
RAX42: All versions
RAX43: All versions
RAX48: All versions
RAX45: All versions
RAX50S: All versions
RAX38v2: All versions
RAX50: All versions
RAX35v2: All versions
RAX40v2: All versions
CAX80: All versions
RAXE500: All versions
RAXE450: All versions
CPE2.3- cpe:2.3:h:netgear:c7000v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax42:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax43:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax48:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax45:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50s:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax38v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax35v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax40v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:cax80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe500:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe450:*:*:*:*:*:*:*:*
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
