OS Command Injection in NETGEAR products - #VU70576

Vulnerability identifier: #VU70576

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary shell commands on the device.

The vulnerability exists due to improper input validation. A remote authenticated user can pass specially crafted data to the application and execute arbitrary OS commands on the target device.

RAX200
RAX75
RAX80
R7960P
R8000P
RBK852
RBR850
RBS850

Install updates from vendor's website.

RAX200 - update to 1.0.4.120
RAX75 - update to 1.0.4.120
RAX80 - update to 1.0.4.120
R7960P - update to 1.4.4.94
R8000P - update to 1.4.4.94
RBK852 - update to 3.2.17.12
RBR850 - update to 3.2.17.12
RBS850 - update to 3.2.17.12

• https://kb.netgear.com/000065477/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0565

• Authenticated command executioin in NETGEAR routers