Arbitrary Code Execution Vulnerability in NETGEAR Routers

CVE-2020-10929

Summary

The vulnerability present in NETGEAR R6700 routers arises from inadequate validation of user-inputted data during string table file uploads. This flaw allows network-adjacent attackers to exploit it without authentication, leading to potential execution of arbitrary code in the context of the admin user. As a result, it opens a pathway for unauthorized access and control over affected devices, posing significant security risks.

References