Authentication Bypass in NETGEAR R6700 Routers

CVE-2020-10924

Summary

A vulnerability exists in NETGEAR R6700 routers that allows network-adjacent attackers to bypass the required authentication. This flaw is specifically related to the UPnP service, which is configured to listen on TCP port 5000 by default. Attackers can exploit this issue by inputting data that exceeds the acceptable length, enabling them to manipulate memory operations. As a result, this can lead to the execution of code with root privileges, potentially compromising the entire system. For further details, refer to the advisory by Zero Day Initiative.

References