OS Command Injection in NETGEAR products - #VU70578

Vulnerability identifier: #VU70578

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary shell commands on the device.

The vulnerability exists due to improper input validation. A remote authenticated user can send specially crafted data to the application and execute arbitrary OS commands on the device.

R7000
R8000
R7000P
R6900P
RAX45
RAX50
RAX15
RAX20
RAX200
RAX75
RAX80
MR60
MS60
MK62
R7960P
R8000P
RBS850
RBR850
RBK852
RBS750
RBR750
RBK752

Install updates from vendor's website.

R7000 - update to 1.0.2.66
RAX45 - update to 1.0.2.66
RAX50 - update to 1.0.2.66
RAX15 - update to 1.0.2.82
RAX20 - update to 1.0.2.82
RAX200 - update to 1.0.3.106
RAX75 - update to 1.0.3.106
RAX80 - update to 1.0.3.106
R8000 - update to 1.0.4.84
MR60 - update to 1.1.7.132
MS60 - update to 1.1.7.132
MK62 - update to 1.1.7.132
R7000P - update to 1.3.3.152
R6900P - update to 1.3.3.152
R7960P - update to 1.4.4.94
R8000P - update to 1.4.4.94
RBS850 - update to 3.2.16.6
RBR850 - update to 3.2.16.6
RBK852 - update to 3.2.16.6
RBS750 - update to 3.2.16.6
RBR750 - update to 3.2.16.6
RBK752 - update to 3.2.16.6

• https://kb.netgear.com/000065484/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0249

• Authenticated command executioin in several NETGEAR routers