OS Command Injection in NETGEAR products - #VU70579

Vulnerability identifier: #VU70579

CSH Severity: Low

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary shell commands on the device.

The vulnerability exists due to improper input validation. A remote authenticated user can send specially crafted data to the application and execute arbitrary OS commands on the device.

RAX15
RAX20
RAX50
RAX45
RAX75
RAX200
RAX80
MK62
MR60
MS60
R8000P
R7960P
RBK752
RBR750
RBS750
RBS850
RBR850
RBK852
R7900
R8000
R7000P

Install updates from vendor's website.

RAX15 - update to 1.0.1.64
RAX20 - update to 1.0.1.64
RAX50 - update to 1.0.2.28
RAX45 - update to 1.0.2.28
RAX75 - update to 1.0.3.106
RAX200 - update to 1.0.3.106
RAX80 - update to 1.0.3.106
R7900 - update to 1.0.4.38
R8000 - update to 1.0.4.68
MK62 - update to 1.0.6.110
MR60 - update to 1.0.6.110
MS60 - update to 1.0.6.110
R7000P - update to 1.3.3.140
R8000P - update to 1.4.4.94
R7960P - update to 1.4.4.94
RBK752 - update to 3.2.16.6
RBR750 - update to 3.2.16.6
RBS750 - update to 3.2.16.6
RBS850 - update to 3.2.16.6
RBR850 - update to 3.2.16.6
RBK852 - update to 3.2.16.6

• https://kb.netgear.com/000065485/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0221

• Authenticated command executioin in several NETGEAR routers