Arbitrary Code Execution Vulnerability in NETGEAR R6700 Routers

CVE-2020-10927

Summary

A vulnerability exists in the NETGEAR R6700 routers that permits network-adjacent attackers to execute arbitrary code. The flaw is rooted in the encryption of firmware update images, where an inadequate encryption algorithm is employed. This vulnerability not only allows for code execution without requiring authentication but can also be exploited in conjunction with other vulnerabilities to gain root-level access. Users should take immediate steps to secure their devices against potential threats.

References