Command Injection in NETGEAR products - #VU73748

Vulnerability identifier: #VU73748

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-77

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to improper input validation. A remote unauthenticated attacker on the local network can pass specially crafted data to the application and execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

EX6130
EX6120
EX3700
EX3800
EAX20
EAX80
EX7000
RAX35v2
RAX38v2
RAX40v2
RAX43
RAX50
RAX45
RAX20
RAX15
RAX200
RAX80
RAX75
MS80
MR80
MK83
LAX20
MK62
MS60
MR60
R8000P
RBW30
RBK752
RBR750
RBS750
RBK852
RBR850
RBS850
CBR750
XR1000
R6400
R6400v2
R7000
R7000P
RS400

Install updates from vendor's website.

EX6130 - update to 1.0.0.44
XR1000 - update to 1.0.0.64
EX6120 - update to 1.0.0.64
EX3700 - update to 1.0.0.94
EX3800 - update to 1.0.0.94
EAX20 - update to 1.0.1.62
EAX80 - update to 1.0.1.70
R6400 - update to 1.0.1.74
EX7000 - update to 1.0.1.106
RAX35v2 - update to 1.0.3.96
RAX38v2 - update to 1.0.3.96
RAX40v2 - update to 1.0.3.96
RAX43 - update to 1.0.3.96
RAX50 - update to 1.0.3.96
RAX45 - update to 1.0.3.96
RAX20 - update to 1.0.3.96
RAX15 - update to 1.0.3.96
R6400v2 - update to 1.0.4.118
RAX200 - update to 1.0.5.126
RAX80 - update to 1.0.5.126
RAX75 - update to 1.0.5.126
R7000 - update to 1.0.11.126
MS80 - update to 1.1.6.14
MR80 - update to 1.1.6.14
MK83 - update to 1.1.6.14
LAX20 - update to 1.1.6.28
MK62 - update to 1.1.6.122
MS60 - update to 1.1.6.122
MR60 - update to 1.1.6.122
R7000P - update to 1.3.3.140
R8000P - update to 1.4.2.84
RS400 - update to 1.5.1.80
RBW30 - update to 2.6.2.6
RBK752 - update to 4.6.7.13
RBR750 - update to 4.6.7.13
RBS750 - update to 4.6.7.13
RBK852 - update to 4.6.7.13
RBR850 - update to 4.6.7.13
RBS850 - update to 4.6.7.13
CBR750 - update to 4.6.14.4

• https://kb.netgear.com/000065572/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Router-and-Extenders-PSV-2021-0076

• Command Injection in NETGEAR Router and Extenders