Command Injection in NETGEAR products - #VU77788

Vulnerability identifier: #VU77788

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-77

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to execute arbitrary commands on the target system.

The vulnerability exists due to improper input validation. An attacker with physical access can pass specially crafted data to the application and execute arbitrary commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

RAXE500
RAXE450
RAX42
RAX43
RAX48
RAX45
RAX50S
RAX38v2
RAX50
RAX35v2
RAX40v2
C7000v2
CAX80

Install updates from vendor's website.

RAXE500 - update to 1.0.9.78
RAXE450 - update to 1.0.9.78
RAX42 - update to 1.0.10.110
RAX43 - update to 1.0.10.110
RAX48 - update to 1.0.10.110
RAX45 - update to 1.0.10.110
RAX50S - update to 1.0.10.110
RAX38v2 - update to 1.0.10.110
RAX50 - update to 1.0.10.110
RAX35v2 - update to 1.0.10.110
RAX40v2 - update to 1.0.10.110
C7000v2 - update to 1.03.08
CAX80 - update to 2.1.4.2

• https://kb.netgear.com/000065712/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Routers-PSV-2021-0349

• Command Injection in NETGEAR Routers